diff --git a/cad_log.txt b/cad_log.txt index 3acbc926c66a32837c5f5e7ade31755da0c40a08..b29d0ffbe463c6027ca91e04f818fcb72dc103da 100644 --- a/cad_log.txt +++ b/cad_log.txt @@ -1,77 +1,20 @@ -INFO:__main__:Starting... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorService:Starting Service (tentative endpoint: 0.0.0.0:10001, max_workers: 10)... -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Creating Centralized Attack Detector Service -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Features: [3.0, 5.0, 7.0, 8.0, 9.0, 17.0, 19.0, 21.0, 22.0, 23.0] -DEBUG:monitoring.client.MonitoringClient:Creating channel to 10.152.183.5:7070... -DEBUG:monitoring.client.MonitoringClient:Channel created -DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:Creating channel to l3-attackmitigatorservice:10002... -DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:Channel created -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorService:Listening on 0.0.0.0:10001... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorService:Service started -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetFeaturesIds request: {"message": ""} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetFeaturesIds reply: {"auto_features": [3.0, 5.0, 7.0, 8.0, 9.0, 17.0, 19.0, 21.0, 22.0, 23.0]} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetScalabilityConfig request: {"max_connection_time": 0.8, "time_to_stabilize": 1.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Received scalability config request -E0421 10:39:05.237784321 92 fork_posix.cc:76] Other threads are currently calling into gRPC, skipping fork() handlers -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetScalabilityConfig reply: {"message": "CSV generated"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Starting async prediction accuracy analysis 2 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Correct csv load: True -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.05719923973083496 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 1 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Creating KPIs for service context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Confidence of the cryptomining detector in the security status in the last time interval of the service 635973d9-976c-4c6f-bb6d-cadca6dd2147", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_SECURITY_STATUS_CRYPTO", "service_id": {"service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}} -DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "13"}} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_security_status -DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Security status of the service in a time interval of the service 635973d9-976c-4c6f-bb6d-cadca6dd2147 (\u201c0\u201d if no attack has been detected on the service and \u201c1\u201d if a cryptomining attack has been detected)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_ML_CONFIDENCE", "service_id": {"service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}} -DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "14"}} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_ml_model_confidence -DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Number of attack connections detected in a time interval of the service 635973d9-976c-4c6f-bb6d-cadca6dd2147 (attacks of the same connection [origin IP, origin port, destination IP and destination port] are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_ATTACK_CONNS", "service_id": {"service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}} -DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "15"}} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_unique_attack_conns -DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Number of unique compromised clients of the service in a time interval of the service 635973d9-976c-4c6f-bb6d-cadca6dd2147 (attacks from the same origin IP are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_COMPROMISED_CLIENTS", "service_id": {"service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}} -DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "16"}} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_unique_compromised_clients -DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - number of unique attackers of the service in a time interval of the service 635973d9-976c-4c6f-bb6d-cadca6dd2147 (attacks from the same destination IP are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_ATTACKERS", "service_id": {"service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}} -DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "17"}} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_unique_attackers -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPIs for service context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.559064}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.559064}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.559064}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:self.time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval: 60 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:0:01:00 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:05.674563 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:No KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0007340908050537109 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03238964080810547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62983:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62983', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -91,117 +34,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 0.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.0046796798706 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006234645843505859 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 2 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:05.681895 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.630806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998262}, "timestamp": {"timestamp": 1683550829.630806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.630806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.630806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.630806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08045387268066406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62983:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62983', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073545.6827891 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073545.6827891 -} -kpi_value { - floatVal: 1 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073545.6827891 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073545.6827891 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073545.6827891 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.682789}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.755743}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1682073545.682789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998268}, "timestamp": {"timestamp": 1683550829.755743}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.682789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.755743}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.682789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.755743}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.682789}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.755743}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.062409162521362305 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04344892501831055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48429:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '48429', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -221,117 +118,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.07375955581665 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00042819976806640625 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 3 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:05.749488 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.83878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998274}, "timestamp": {"timestamp": 1683550829.83878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.83878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.83878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.83878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034172773361206055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48429:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '48429', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073545.749773 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073545.749773 -} -kpi_value { - floatVal: 1 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073545.749773 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073545.749773 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073545.749773 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.749773}} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.91347}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1682073545.749773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999828}, "timestamp": {"timestamp": 1683550829.91347}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.749773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.91347}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.749773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.91347}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.749773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.91347}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03148508071899414 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039582014083862305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48429:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '48429', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -351,117 +202,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.1104040145874 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005080699920654297 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 4 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:05.785591 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.993473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982864}, "timestamp": {"timestamp": 1683550829.993473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.993473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.993473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550829.993473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04801678657531738 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48429:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '48429', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073545.7858281 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073545.7858281 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 1 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073545.7858281 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073545.7858281 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073545.7858281 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.785828}} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.096695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1682073545.785828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998292}, "timestamp": {"timestamp": 1683550830.096695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.785828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.096695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.785828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.096695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.785828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.096695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03724169731140137 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035994768142700195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42050:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -481,117 +286,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.15265393257141 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004820823669433594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42050:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006535786622885525 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001135920172726218 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005366994591895491 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003962278366088867 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 5 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:05.829454 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 746 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.20858}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982977}, "timestamp": {"timestamp": 1683550830.20858}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.20858}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.20858}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.20858}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03310441970825195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42050:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073545.82967 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073545.82967 -} -kpi_value { - floatVal: 1 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073545.82967 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073545.82967 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073545.82967 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.82967}} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.288404}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1682073545.82967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99983037}, "timestamp": {"timestamp": 1683550830.288404}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.82967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.288404}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.82967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.288404}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.82967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.288404}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.054526567459106445 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03346371650695801 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -611,117 +400,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.2134485244751 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00044655799865722656 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 6 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:05.888435 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.370497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99983096}, "timestamp": {"timestamp": 1683550830.370497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.370497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.370497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.370497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08498620986938477 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073545.8888209 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073545.8888209 -} -kpi_value { - floatVal: 0.999572933 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073545.8888209 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073545.8888209 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073545.8888209 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.888821}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.511744}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99957293}, "timestamp": {"timestamp": 1682073545.888821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99983156}, "timestamp": {"timestamp": 1683550830.511744}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.888821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.511744}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.888821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.511744}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.888821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.511744}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03772783279418945 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03125309944152832 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -741,117 +484,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.25556015968323 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004100799560546875 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:05.930577 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073545.930809 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073545.930809 -} -kpi_value { - floatVal: 0.999288201 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073545.930809 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073545.930809 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073545.930809 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.930809}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.586007}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9992882}, "timestamp": {"timestamp": 1682073545.930809}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998321}, "timestamp": {"timestamp": 1683550830.586007}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.930809}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.586007}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.930809}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.586007}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073545.930809}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.586007}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04091477394104004 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03260326385498047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -871,117 +526,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.30091595649719 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001332998275756836 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 8 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.245691 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.246686 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.246686 -} -kpi_value { - floatVal: 0.99908483 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073546.246686 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073546.246686 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073546.246686 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.246686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.658435}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99908483}, "timestamp": {"timestamp": 1682073546.246686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998327}, "timestamp": {"timestamp": 1683550830.658435}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.246686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.658435}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.246686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.658435}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.246686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.658435}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03935599327087402 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02347707748413086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:00:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -1001,117 +568,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.61547470092773 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008025169372558594 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 9 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.292862 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.72763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998251}, "timestamp": {"timestamp": 1683550830.72763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.72763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.72763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.72763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035486698150634766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.293942 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.293942 -} -kpi_value { - floatVal: 0.999199212 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073546.293942 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073546.293942 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073546.293942 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.293942}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.809442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9991992}, "timestamp": {"timestamp": 1682073546.293942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998257}, "timestamp": {"timestamp": 1683550830.809442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.293942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.809442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.293942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.809442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.293942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.809442}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04586052894592285 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05087113380432129 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -1131,117 +652,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.66817998886108 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00042057037353515625 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 10 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.343196 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.903964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998263}, "timestamp": {"timestamp": 1683550830.903964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.903964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.903964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.903964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028483867645263672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.343446 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.343446 -} -kpi_value { - floatVal: 0.999288201 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073546.343446 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073546.343446 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073546.343446 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.343446}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.974527}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9992882}, "timestamp": {"timestamp": 1682073546.343446}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982685}, "timestamp": {"timestamp": 1683550830.974527}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.343446}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.974527}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.343446}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.974527}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.343446}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550830.974527}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03568291664123535 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029650449752807617 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -1261,117 +736,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.7083158493042 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004875659942626953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54913:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54913", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 903.0}, {"feature": 7.0}, {"feature": 1959.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2457.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54913:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54913", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 903.0}, {"feature": 7.0}, {"feature": 1959.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2457.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006541404713392806 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011352633040454048 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005369389546103776 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002891063690185547 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 11 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.383840 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 747 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.067286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982744}, "timestamp": {"timestamp": 1683550831.067286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.067286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.067286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.067286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0223846435546875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.3840361 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.3840361 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999359369 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073546.3840361 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073546.3840361 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073546.3840361 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.384036}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.129561}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99935937}, "timestamp": {"timestamp": 1682073546.384036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982804}, "timestamp": {"timestamp": 1683550831.129561}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.384036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.129561}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.384036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.129561}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.384036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.129561}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02691936492919922 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026167869567871094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -1391,117 +850,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.74018263816833 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004227161407470703 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 12 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.415048 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.200948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998215}, "timestamp": {"timestamp": 1683550831.200948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.200948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.200948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.200948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027525901794433594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.41528 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.41528 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999417603 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073546.41528 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073546.41528 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073546.41528 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.41528}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.266636}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994176}, "timestamp": {"timestamp": 1682073546.41528}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998137}, "timestamp": {"timestamp": 1683550831.266636}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.41528}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.266636}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.41528}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.266636}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.41528}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.266636}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027428150177001953 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03322911262512207 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -1521,117 +934,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.7727518081665 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007052421569824219 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 13 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.481513 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.4820261 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.4820261 -} -kpi_value { - floatVal: 0.999466121 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073546.4820261 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073546.4820261 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073546.4820261 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.482026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.346643}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994661}, "timestamp": {"timestamp": 1682073546.482026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998143}, "timestamp": {"timestamp": 1683550831.346643}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.482026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.346643}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.482026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.346643}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.482026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.346643}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.036804914474487305 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025481462478637695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -1651,117 +976,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.84843802452087 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007724761962890625 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 14 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.524725 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.5252969 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.5252969 -} -kpi_value { - floatVal: 0.999507189 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073546.5252969 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073546.5252969 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073546.5252969 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.525297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.410203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995072}, "timestamp": {"timestamp": 1682073546.525297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981487}, "timestamp": {"timestamp": 1683550831.410203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.525297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.410203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.525297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.410203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.525297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.410203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06318283081054688 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027105331420898438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -1781,117 +1018,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.91736316680908 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004677772521972656 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 15 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.592105 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.476524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981546}, "timestamp": {"timestamp": 1683550831.476524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.476524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.476524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.476524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02021932601928711 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.5923891 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.5923891 -} -kpi_value { - floatVal: 0.999360263 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073546.5923891 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073546.5923891 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073546.5923891 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.592389}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.536962}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99936026}, "timestamp": {"timestamp": 1682073546.592389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998161}, "timestamp": {"timestamp": 1683550831.536962}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.592389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.536962}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.592389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.536962}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.592389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.536962}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02838921546936035 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030309200286865234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -1911,117 +1102,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 101.95126247406006 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009121894836425781 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 16 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.676651 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.605102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998167}, "timestamp": {"timestamp": 1683550831.605102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.605102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.605102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.605102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03347301483154297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54913:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54913', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.677588 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.677588 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.99940294 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073546.677588 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073546.677588 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073546.677588 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.677588}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.687156}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99940294}, "timestamp": {"timestamp": 1682073546.677588}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998173}, "timestamp": {"timestamp": 1683550831.687156}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.677588}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.687156}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.677588}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.687156}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.677588}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.687156}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03514742851257324 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02625584602355957 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54913:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54913', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -2041,117 +1186,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.04250073432922 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009233951568603516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54913:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54913", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 903.0}, {"feature": 7.0}, {"feature": 1959.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1446.0}, {"feature": 6.0}, {"feature": 2027.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54913:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54913", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 903.0}, {"feature": 7.0}, {"feature": 1959.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2457.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25464:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25464", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 549.0}, {"feature": 8.0}, {"feature": 1232.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25464:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25464", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 549.0}, {"feature": 7.0}, {"feature": 882.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4040:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4040", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2615.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12226:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12226", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 925.0}, {"feature": 5.0}, {"feature": 1057.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 1801.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1886.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 1801.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1886.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2660.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006550226525066142 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011347603678298435 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005370359576772898 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0031201839447021484 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 17 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.719191 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 748 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.798155}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981785}, "timestamp": {"timestamp": 1683550831.798155}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.798155}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.798155}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.798155}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025844573974609375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54913:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54913', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.7200871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.7200871 -} -kpi_value { - floatVal: 0.999440253 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073546.7200871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073546.7200871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073546.7200871 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.720087}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.865793}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99944025}, "timestamp": {"timestamp": 1682073546.720087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981844}, "timestamp": {"timestamp": 1683550831.865793}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.720087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.865793}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.720087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.865793}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.720087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.865793}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0707697868347168 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02600860595703125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54913:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54913', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -2171,117 +1300,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.1208438873291 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009217262268066406 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 18 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.801212 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.93238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981904}, "timestamp": {"timestamp": 1683550831.93238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.93238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.93238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550831.93238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02362799644470215 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25464:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25464', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.8034639 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.8034639 -} -kpi_value { - floatVal: 0.999473155 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073546.8034639 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073546.8034639 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073546.8034639 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.803464}} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.004628}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99947315}, "timestamp": {"timestamp": 1682073546.803464}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981964}, "timestamp": {"timestamp": 1683550832.004628}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.803464}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.004628}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.803464}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.004628}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.803464}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.004628}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07662439346313477 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02909564971923828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25464:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25464', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -2301,117 +1384,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.20833945274353 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008838176727294922 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 19 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.885967 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.8869109 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.8869109 -} -kpi_value { - floatVal: 0.99950242 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073546.8869109 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073546.8869109 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073546.8869109 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.886911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.094596}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995024}, "timestamp": {"timestamp": 1682073546.886911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982023}, "timestamp": {"timestamp": 1683550832.094596}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.886911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.094596}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.886911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.094596}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.886911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.094596}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04272580146789551 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06018209457397461 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4040:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4040', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -2431,117 +1426,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.25909328460693 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007226467132568359 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 20 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.936234 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.93678 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073546.93678 -} -kpi_value { - floatVal: 0.999528646 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073546.93678 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073546.93678 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073546.93678 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.93678}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.204355}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99952865}, "timestamp": {"timestamp": 1682073546.93678}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982077}, "timestamp": {"timestamp": 1683550832.204355}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.93678}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.204355}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.93678}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.204355}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.93678}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.204355}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04621720314025879 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023934602737426758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12226:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12226', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -2561,117 +1468,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.31261372566223 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007355213165283203 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 21 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:06.989205 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.27149}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982136}, "timestamp": {"timestamp": 1683550832.27149}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.27149}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.27149}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.27149}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023807287216186523 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073546.9899039 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073546.9899039 -} -kpi_value { - floatVal: 0.99955219 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073546.9899039 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073546.9899039 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073546.9899039 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.989904}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.338343}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995522}, "timestamp": {"timestamp": 1682073546.989904}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998219}, "timestamp": {"timestamp": 1683550832.338343}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.989904}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.338343}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.989904}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.338343}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073546.989904}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.338343}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047254085540771484 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024194955825805664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -2691,117 +1552,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.36659336090088 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1854:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1854", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00080108642578125 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 22 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.043885 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.402834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998225}, "timestamp": {"timestamp": 1683550832.402834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.402834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.402834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.402834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028264284133911133 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.0443871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.0443871 -} -kpi_value { - floatVal: 0.999573529 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.0443871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.0443871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.0443871 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.044387}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.475902}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995735}, "timestamp": {"timestamp": 1682073547.044387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982303}, "timestamp": {"timestamp": 1683550832.475902}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.044387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.475902}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.044387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.475902}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.044387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.475902}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05295968055725098 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1854:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1854', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.036476850509643555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -2821,117 +1636,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.42733860015869 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007297992706298828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006549622364142022 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011340038017065444 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005371329607442021 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0023593902587890625 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 23 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.104193 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 749 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.607711}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998236}, "timestamp": {"timestamp": 1683550832.607711}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.607711}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.607711}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.607711}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03712964057922363 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.107657 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.107657 -} -kpi_value { - floatVal: 0.9995929 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.107657 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.107657 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.107657 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.107657}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.70155}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995929}, "timestamp": {"timestamp": 1682073547.107657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982417}, "timestamp": {"timestamp": 1683550832.70155}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.107657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.70155}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.107657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.70155}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.107657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.70155}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.044928550720214844 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030260324478149414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -2951,117 +1750,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.4799427986145 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008497238159179688 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 24 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.156764 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.781823}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998247}, "timestamp": {"timestamp": 1683550832.781823}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.781823}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.781823}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.781823}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04311108589172363 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:00:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.157696 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.157696 -} -kpi_value { - floatVal: 0.999610603 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.157696 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.157696 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.157696 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.157696}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.880973}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996106}, "timestamp": {"timestamp": 1682073547.157696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998186}, "timestamp": {"timestamp": 1683550832.880973}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.157696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.880973}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.157696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.880973}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.157696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.880973}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037650108337402344 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024118900299072266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:00:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -3081,117 +1834,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.52520966529846 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008652210235595703 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 25 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.202368 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.946157}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998113}, "timestamp": {"timestamp": 1683550832.946157}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.946157}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.946157}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550832.946157}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028182506561279297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.203377 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.203377 -} -kpi_value { - floatVal: 0.999626815 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.203377 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.203377 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.203377 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.203377}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.013807}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996268}, "timestamp": {"timestamp": 1682073547.203377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998118}, "timestamp": {"timestamp": 1683550833.013807}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.203377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.013807}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.203377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.013807}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.203377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.013807}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.053139686584472656 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02409982681274414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -3211,117 +1918,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.58569812774658 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001283884048461914 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 26 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.279321 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.089018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998124}, "timestamp": {"timestamp": 1683550833.089018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.089018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.089018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.089018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034717559814453125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073547.28033 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.28033 -} -kpi_value { - floatVal: 0.999641776 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.28033 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.28033 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.28033 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.28033}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.173261}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996418}, "timestamp": {"timestamp": 1682073547.28033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999813}, "timestamp": {"timestamp": 1683550833.173261}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.28033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.173261}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.28033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.173261}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.28033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.173261}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06280875205993652 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04616236686706543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -3341,117 +2002,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.67292833328247 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012831687927246094 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 27 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.350187 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.258214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981356}, "timestamp": {"timestamp": 1683550833.258214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.258214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.258214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.258214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.053841352462768555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.351022 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.351022 -} -kpi_value { - floatVal: 0.999655545 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.351022 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.351022 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.351022 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.351022}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.351515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99965554}, "timestamp": {"timestamp": 1682073547.351022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981415}, "timestamp": {"timestamp": 1683550833.351515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.351022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.351515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.351022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.351515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.351022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.351515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03785443305969238 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022521257400512695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:00:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -3471,117 +2086,59 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.71730756759644 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.000392913818359375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12226:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12226", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 925.0}, {"feature": 6.0}, {"feature": 1420.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12226:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12226", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 1783.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12226:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12226", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 925.0}, {"feature": 6.0}, {"feature": 1420.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006567838254074255 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011343435654365174 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005372329906094819 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005594968795776367 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 28 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.392013 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 750 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.392216 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.392216 -} -kpi_value { - floatVal: 0.9996683 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073547.392216 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073547.392216 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073547.392216 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.392216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.735916}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996683}, "timestamp": {"timestamp": 1682073547.392216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998074}, "timestamp": {"timestamp": 1683550833.735916}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.392216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.735916}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.392216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.735916}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.392216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.735916}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03467965126037598 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02530837059020996 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -3601,117 +2158,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.7560670375824 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.000408172607421875 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 29 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.433653 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.816852}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999808}, "timestamp": {"timestamp": 1683550833.816852}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.816852}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.816852}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.816852}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024741411209106445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.433851 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.433851 -} -kpi_value { - floatVal: 0.999680161 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.433851 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.433851 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.433851 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.433851}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.888032}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99968016}, "timestamp": {"timestamp": 1682073547.433851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980855}, "timestamp": {"timestamp": 1683550833.888032}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.433851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.888032}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.433851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.888032}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.433851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.888032}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06872105598449707 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023439645767211914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -3731,117 +2242,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.83178544044495 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004565715789794922 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 30 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.506697 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.951977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980915}, "timestamp": {"timestamp": 1683550833.951977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.951977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.951977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550833.951977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024495840072631836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.506927 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.506927 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999617517 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.506927 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.506927 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.506927 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.506927}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.017379}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996175}, "timestamp": {"timestamp": 1682073547.506927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980974}, "timestamp": {"timestamp": 1683550834.017379}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.506927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.017379}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.506927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.017379}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.506927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.017379}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02979445457458496 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04230666160583496 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -3861,117 +2326,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.86587142944336 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 5991.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007021427154541016 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 31 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.546302 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.5464871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.5464871 -} -kpi_value { - floatVal: 0.999559104 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073547.5464871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073547.5464871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073547.5464871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.546487}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.101773}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995591}, "timestamp": {"timestamp": 1682073547.546487}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998103}, "timestamp": {"timestamp": 1683550834.101773}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.546487}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.101773}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.546487}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.101773}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.546487}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.101773}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03605771064758301 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02912163734436035 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -3991,117 +2368,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.91171479225159 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00035452842712402344 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 32 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.586327 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.188404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998109}, "timestamp": {"timestamp": 1683550834.188404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.188404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.188404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.188404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023305177688598633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.5865531 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.5865531 -} -kpi_value { - floatVal: 0.99957335 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.5865531 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.5865531 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.5865531 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.586553}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.254454}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99957335}, "timestamp": {"timestamp": 1682073547.586553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998114}, "timestamp": {"timestamp": 1683550834.254454}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.586553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.254454}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.586553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.254454}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.586553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.254454}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03951144218444824 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04330897331237793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12226:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12226', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -4121,117 +2452,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 102.95520663261414 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004210472106933594 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 33 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.633078 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.3435}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999812}, "timestamp": {"timestamp": 1683550834.3435}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.3435}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.3435}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.3435}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03982853889465332 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12226:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12226', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.6332829 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073547.6332829 -} -kpi_value { - floatVal: 0.999586642 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.6332829 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.6332829 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.6332829 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.633283}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.42866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99958664}, "timestamp": {"timestamp": 1682073547.633283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981254}, "timestamp": {"timestamp": 1683550834.42866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.633283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.42866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.633283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.42866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.633283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.42866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08220291137695312 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02494955062866211 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12226:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12226', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -4251,117 +2536,59 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.04473519325256 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005619525909423828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55000:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55000", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 15.0}, {"feature": 925.0}, {"feature": 6.0}, {"feature": 1189.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1451.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55000:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55000", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 20.0}, {"feature": 17.0}, {"feature": 925.0}, {"feature": 6.0}, {"feature": 1189.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1886.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55000:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55000", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 19.0}, {"feature": 16.0}, {"feature": 925.0}, {"feature": 6.0}, {"feature": 1189.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1451.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55000:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55000", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 19.0}, {"feature": 16.0}, {"feature": 925.0}, {"feature": 6.0}, {"feature": 1189.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1886.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006574218042973632 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011337227282847686 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005373330204747617 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00360870361328125 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 34 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.720001 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 751 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.720192 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.720192 -} -kpi_value { - floatVal: 0.999599159 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073547.720192 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073547.720192 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073547.720192 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.720192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.536009}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99959916}, "timestamp": {"timestamp": 1682073547.720192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998131}, "timestamp": {"timestamp": 1683550834.536009}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.720192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.536009}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.720192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.536009}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.720192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.536009}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.045018672943115234 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03328084945678711 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55000:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55000', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -4381,117 +2608,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.09440326690674 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00039196014404296875 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 35 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.771188 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.617657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998136}, "timestamp": {"timestamp": 1683550834.617657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.617657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.617657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.617657}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025548934936523438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55000:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55000', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.77137 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073547.77137 -} -kpi_value { - floatVal: 0.99961096 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.77137 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.77137 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.77137 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.77137}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.690328}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99961096}, "timestamp": {"timestamp": 1682073547.77137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998142}, "timestamp": {"timestamp": 1683550834.690328}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.77137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.690328}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.77137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.690328}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.77137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.690328}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04595041275024414 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032846927642822266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55000:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55000', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -4511,117 +2692,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.14657735824585 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00037980079650878906 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 36 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.824540 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.762363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981475}, "timestamp": {"timestamp": 1683550834.762363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.762363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.762363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.762363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02830362319946289 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55000:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55000', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.824733 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.824733 -} -kpi_value { - floatVal: 0.99954927 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.824733 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.824733 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.824733 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.824733}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.830689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99954927}, "timestamp": {"timestamp": 1682073547.824733}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998153}, "timestamp": {"timestamp": 1683550834.830689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.824733}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.830689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.824733}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.830689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.824733}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.830689}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06346774101257324 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031132221221923828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:00:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -4641,117 +2776,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.21739792823792 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1398.0}, {"feature": 1.0}, {"feature": 1398.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004856586456298828 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 37 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.898615 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.8988221 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.8988221 -} -kpi_value { - floatVal: 0.999561787 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073547.8988221 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073547.8988221 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073547.8988221 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.898822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.903014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995618}, "timestamp": {"timestamp": 1682073547.898822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998096}, "timestamp": {"timestamp": 1683550834.903014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.898822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.903014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.898822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.903014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.898822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550834.903014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02777576446533203 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027556896209716797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -4771,117 +2818,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.25573563575745 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003600120544433594 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 38 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:07.930490 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.004974}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981016}, "timestamp": {"timestamp": 1683550835.004974}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.004974}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.004974}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.004974}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02799844741821289 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073547.930691 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073547.930691 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999573588 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073547.930691 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073547.930691 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073547.930691 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.930691}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.095116}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995736}, "timestamp": {"timestamp": 1682073547.930691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998107}, "timestamp": {"timestamp": 1683550835.095116}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.930691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.095116}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.930691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.095116}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073547.930691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.095116}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.10343289375305176 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0339052677154541 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -4901,117 +2902,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.3633382320404 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 4593.0}, {"feature": 6.0}, {"feature": 10185.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00041747093200683594 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 39 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.271710 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.173363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981123}, "timestamp": {"timestamp": 1683550835.173363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.173363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.173363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.173363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.1139376163482666 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:00:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073548.271935 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.271935 -} -kpi_value { - floatVal: 0.999528646 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.271935 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.271935 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.271935 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.271935}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.356836}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99952865}, "timestamp": {"timestamp": 1682073548.271935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998049}, "timestamp": {"timestamp": 1683550835.356836}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.271935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.356836}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.271935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.356836}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.271935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.356836}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024494409561157227 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05224800109863281 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -5031,117 +2986,59 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.62559819221497 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 4593.0}, {"feature": 5.0}, {"feature": 8787.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00035643577575683594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006571561369786108 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011329920643221181 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005372329906094819 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0024793148040771484 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 40 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.303179 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 752 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.3033891 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.3033891 -} -kpi_value { - floatVal: 0.999540746 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073548.3033891 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073548.3033891 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073548.3033891 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.303389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.516731}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99954075}, "timestamp": {"timestamp": 1682073548.303389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980545}, "timestamp": {"timestamp": 1683550835.516731}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.303389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.516731}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.303389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.516731}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.303389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.516731}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02233719825744629 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04201936721801758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -5161,117 +3058,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.65501809120178 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 11583.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00041031837463378906 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 41 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.330042 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.607148}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999806}, "timestamp": {"timestamp": 1683550835.607148}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.607148}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.607148}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.607148}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030443191528320312 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073548.3303721 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.3303721 -} -kpi_value { - floatVal: 0.99955219 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.3303721 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.3303721 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.3303721 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.330372}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.704253}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995522}, "timestamp": {"timestamp": 1682073548.330372}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998066}, "timestamp": {"timestamp": 1683550835.704253}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.330372}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.704253}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.330372}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.704253}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.330372}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.704253}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0238797664642334 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03508806228637695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -5291,117 +3142,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.68326473236084 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003445148468017578 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 42 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.372864 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.789965}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998071}, "timestamp": {"timestamp": 1683550835.789965}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.789965}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.789965}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.789965}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02677154541015625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.3732829 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.3732829 -} -kpi_value { - floatVal: 0.999563098 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.3732829 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.3732829 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.3732829 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.373283}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.871666}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995631}, "timestamp": {"timestamp": 1682073548.373283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980766}, "timestamp": {"timestamp": 1683550835.871666}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.373283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.871666}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.373283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.871666}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.373283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.871666}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039108991622924805 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02592182159423828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -5421,117 +3226,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.74136233329773 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009891986846923828 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 43 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.417949 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.943779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998082}, "timestamp": {"timestamp": 1683550835.943779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.943779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.943779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550835.943779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02332925796508789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.418189 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.418189 -} -kpi_value { - floatVal: 0.999573529 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.418189 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.418189 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.418189 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.418189}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.013373}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995735}, "timestamp": {"timestamp": 1682073548.418189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998087}, "timestamp": {"timestamp": 1683550836.013373}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.418189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.013373}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.418189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.013373}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.418189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.013373}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.053772687911987305 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02480006217956543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -5551,117 +3310,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.80123543739319 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005631446838378906 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 44 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.477164 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.4775479 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.4775479 -} -kpi_value { - floatVal: 0.999583423 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073548.4775479 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073548.4775479 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073548.4775479 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.477548}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.098059}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995834}, "timestamp": {"timestamp": 1682073548.477548}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980927}, "timestamp": {"timestamp": 1683550836.098059}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.477548}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.098059}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.477548}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.098059}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.477548}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.098059}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030374526977539062 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028593063354492188 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -5681,117 +3352,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.8376932144165 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006783008575439453 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 45 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.513469 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.205112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998098}, "timestamp": {"timestamp": 1683550836.205112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.205112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.205112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.205112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03674173355102539 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.5141361 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.5141361 -} -kpi_value { - floatVal: 0.9995929 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.5141361 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.5141361 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.5141361 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.514136}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.28269}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995929}, "timestamp": {"timestamp": 1682073548.514136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981034}, "timestamp": {"timestamp": 1683550836.28269}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.514136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.28269}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.514136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.28269}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.514136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.28269}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06506204605102539 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02538323402404785 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -5811,117 +3436,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.9080183506012 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00038242340087890625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006570968486134898 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011322406629300393 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005373330204747617 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0038709640502929688 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 46 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.582782 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 753 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.382483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998109}, "timestamp": {"timestamp": 1683550836.382483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.382483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.382483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.382483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029383420944213867 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.5831339 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.5831339 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.99960196 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.5831339 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.5831339 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.5831339 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.583134}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.477949}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99960196}, "timestamp": {"timestamp": 1682073548.583134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998114}, "timestamp": {"timestamp": 1683550836.477949}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.583134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.477949}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.583134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.477949}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.583134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.477949}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027065038681030273 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03436589241027832 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -5941,117 +3550,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 103.93975734710693 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006437301635742188 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 47 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.615697 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.556374}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998119}, "timestamp": {"timestamp": 1683550836.556374}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.556374}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.556374}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.556374}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04509925842285156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073548.616353 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.616353 -} -kpi_value { - floatVal: 0.999610603 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.616353 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.616353 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.616353 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.616353}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.645347}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996106}, "timestamp": {"timestamp": 1682073548.616353}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998124}, "timestamp": {"timestamp": 1683550836.645347}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.616353}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.645347}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.616353}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.645347}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.616353}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.645347}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06240200996398926 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022738933563232422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -6071,117 +3634,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.00854516029358 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009441375732421875 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 48 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.685503 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.706399}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981296}, "timestamp": {"timestamp": 1683550836.706399}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.706399}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.706399}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.706399}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03641104698181152 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.6865289 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.6865289 -} -kpi_value { - floatVal: 0.999618888 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.6865289 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.6865289 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.6865289 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.686529}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.781038}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996189}, "timestamp": {"timestamp": 1682073548.686529}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981344}, "timestamp": {"timestamp": 1683550836.781038}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.686529}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.781038}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.686529}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.781038}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.686529}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.781038}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03384256362915039 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021312236785888672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -6201,117 +3718,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.04965162277222 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47311:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47311", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011494159698486328 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 49 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.726805 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.7278819 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.7278819 -} -kpi_value { - floatVal: 0.999626815 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073548.7278819 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073548.7278819 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073548.7278819 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.727882}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.840778}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996268}, "timestamp": {"timestamp": 1682073548.727882}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999814}, "timestamp": {"timestamp": 1683550836.840778}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.727882}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.840778}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.727882}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.840778}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.727882}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.840778}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05777692794799805 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47311:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47311', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023144960403442383 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -6331,117 +3760,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.11553716659546 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1439:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1439", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008885860443115234 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 50 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.792995 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.794131 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.794131 -} -kpi_value { - floatVal: 0.999634445 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073548.794131 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073548.794131 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073548.794131 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.794131}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.902543}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99963444}, "timestamp": {"timestamp": 1682073548.794131}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998145}, "timestamp": {"timestamp": 1683550836.902543}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.794131}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.902543}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.794131}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.902543}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.794131}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.902543}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03307461738586426 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1439:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1439', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022240161895751953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:00:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -6461,117 +3802,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.15635848045349 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007641315460205078 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 51 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.833305 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.963168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999808}, "timestamp": {"timestamp": 1683550836.963168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.963168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.963168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550836.963168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026669025421142578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.8340471 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.8340471 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999641776 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.8340471 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.8340471 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.8340471 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.834047}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.028432}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996418}, "timestamp": {"timestamp": 1682073548.834047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980855}, "timestamp": {"timestamp": 1683550837.028432}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.834047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.028432}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.834047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.028432}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.834047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.028432}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0560450553894043 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02201557159423828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:00:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -6591,117 +3886,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.21976137161255 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008673667907714844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006567657360404393 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011315260714277239 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005372329906094819 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018656253814697266 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 52 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.896738 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 754 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.119447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998026}, "timestamp": {"timestamp": 1683550837.119447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.119447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.119447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.119447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03101825714111328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.897553 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.897553 -} -kpi_value { - floatVal: 0.999648809 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.897553 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.897553 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.897553 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.897553}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.192616}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996488}, "timestamp": {"timestamp": 1682073548.897553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99979734}, "timestamp": {"timestamp": 1683550837.192616}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.897553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.192616}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.897553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.192616}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.897553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.192616}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040788888931274414 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023195505142211914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -6721,117 +4000,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.26710915565491 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005183219909667969 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 53 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.943598 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.255619}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997979}, "timestamp": {"timestamp": 1683550837.255619}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.255619}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.255619}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.255619}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02185821533203125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.943857 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073548.943857 -} -kpi_value { - floatVal: 0.999655545 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.943857 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.943857 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.943857 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.943857}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.316451}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99965554}, "timestamp": {"timestamp": 1682073548.943857}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997984}, "timestamp": {"timestamp": 1683550837.316451}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.943857}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.316451}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.943857}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.316451}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.943857}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.316451}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03673982620239258 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028336524963378906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -6851,117 +4084,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.30973792076111 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00039267539978027344 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 54 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:08.984679 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.398615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99979895}, "timestamp": {"timestamp": 1683550837.398615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.398615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.398615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.398615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02620720863342285 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073548.9849441 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073548.9849441 -} -kpi_value { - floatVal: 0.999621749 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073548.9849441 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073548.9849441 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073548.9849441 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.984944}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.486438}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99962175}, "timestamp": {"timestamp": 1682073548.984944}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997995}, "timestamp": {"timestamp": 1683550837.486438}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.984944}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.486438}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.984944}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.486438}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073548.984944}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.486438}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039724111557006836 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02528977394104004 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -6981,117 +4168,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.35377621650696 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003688335418701172 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 55 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.028388 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.0286491 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.0286491 -} -kpi_value { - floatVal: 0.999628782 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073549.0286491 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073549.0286491 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073549.0286491 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.028649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.555534}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996288}, "timestamp": {"timestamp": 1682073549.028649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998}, "timestamp": {"timestamp": 1683550837.555534}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.028649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.555534}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.028649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.555534}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.028649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.555534}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07369112968444824 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.019647836685180664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -7111,117 +4210,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.43153929710388 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00039768218994140625 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 56 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.108116 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.108336 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.108336 -} -kpi_value { - floatVal: 0.999635518 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073549.108336 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073549.108336 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073549.108336 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.108336}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.614659}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996355}, "timestamp": {"timestamp": 1682073549.108336}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980056}, "timestamp": {"timestamp": 1683550837.614659}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.108336}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.614659}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.108336}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.614659}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.108336}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.614659}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03917527198791504 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028392791748046875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -7241,117 +4252,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.47666907310486 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003800392150878906 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 57 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.151230 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.694995}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998011}, "timestamp": {"timestamp": 1683550837.694995}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.694995}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.694995}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.694995}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02782416343688965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.1515009 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.1515009 -} -kpi_value { - floatVal: 0.999642 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073549.1515009 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073549.1515009 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073549.1515009 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.151501}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.763623}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999642}, "timestamp": {"timestamp": 1682073549.151501}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980164}, "timestamp": {"timestamp": 1683550837.763623}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.151501}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.763623}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.151501}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.763623}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.151501}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.763623}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022464513778686523 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02199721336364746 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -7371,117 +4336,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.50316333770752 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007410049438476562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1361.0}, {"feature": 9.0}, {"feature": 2660.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45832:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45832", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 15.0}, {"feature": 13.0}, {"feature": 551.0}, {"feature": 7.0}, {"feature": 1169.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 727.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45832:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45832", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 16.0}, {"feature": 14.0}, {"feature": 551.0}, {"feature": 7.0}, {"feature": 1169.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 727.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006567975311132999 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011307768051603887 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005373330204747617 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0030279159545898438 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 58 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.178312 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 755 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.862284}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998022}, "timestamp": {"timestamp": 1683550837.862284}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.862284}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.862284}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.862284}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027916669845581055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.17856 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.17856 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999610841 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073549.17856 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073549.17856 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073549.17856 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.17856}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.984268}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99961084}, "timestamp": {"timestamp": 1682073549.17856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980265}, "timestamp": {"timestamp": 1683550837.984268}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.17856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.984268}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.17856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.984268}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.17856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550837.984268}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02449321746826172 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02247142791748047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45832:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45832', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -7501,117 +4450,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.5330913066864 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007669925689697266 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 59 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.208966 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.066465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998032}, "timestamp": {"timestamp": 1683550838.066465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.066465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.066465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.066465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029456615447998047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45832:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45832', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.209677 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.209677 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999573588 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073549.209677 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073549.209677 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073549.209677 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.209677}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.136933}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995736}, "timestamp": {"timestamp": 1682073549.209677}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998037}, "timestamp": {"timestamp": 1683550838.136933}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.209677}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.136933}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.209677}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.136933}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.209677}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.136933}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06258773803710938 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025769710540771484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -7631,117 +4534,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.60179018974304 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 4593.0}, {"feature": 5.0}, {"feature": 10185.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008032321929931641 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 60 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.542621 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.20255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998042}, "timestamp": {"timestamp": 1683550838.20255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.20255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.20255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.20255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.061217308044433594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073549.54335 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.54335 -} -kpi_value { - floatVal: 0.999544621 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073549.54335 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073549.54335 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073549.54335 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.54335}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.33431}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995446}, "timestamp": {"timestamp": 1682073549.54335}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980474}, "timestamp": {"timestamp": 1683550838.33431}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.54335}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.33431}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.54335}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.33431}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.54335}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.33431}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0863800048828125 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031449079513549805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -7761,117 +4618,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 104.95847010612488 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 4593.0}, {"feature": 1.0}, {"feature": 4593.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00048804283142089844 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 61 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.634778 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.6352069 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.6352069 -} -kpi_value { - floatVal: 0.99955219 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073549.6352069 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073549.6352069 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073549.6352069 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.635207}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.415302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995522}, "timestamp": {"timestamp": 1682073549.635207}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998052}, "timestamp": {"timestamp": 1683550838.415302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.635207}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.415302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.635207}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.415302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.635207}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.415302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06885051727294922 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0254366397857666 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -7891,117 +4660,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.03303265571594 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00045609474182128906 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 62 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.709178 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.7094359 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.7094359 -} -kpi_value { - floatVal: 0.999559522 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073549.7094359 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073549.7094359 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073549.7094359 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.709436}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.487555}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995595}, "timestamp": {"timestamp": 1682073549.709436}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980575}, "timestamp": {"timestamp": 1683550838.487555}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.709436}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.487555}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.709436}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.487555}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.709436}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.487555}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042671918869018555 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02413463592529297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -8021,117 +4702,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.0812451839447 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003979206085205078 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 63 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.756381 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.55057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998062}, "timestamp": {"timestamp": 1683550838.55057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.55057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.55057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.55057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03266406059265137 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.7566049 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.7566049 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999525547 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073549.7566049 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073549.7566049 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073549.7566049 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.756605}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.625823}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99952555}, "timestamp": {"timestamp": 1682073549.756605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980015}, "timestamp": {"timestamp": 1683550838.625823}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.756605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.625823}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.756605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.625823}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.756605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.625823}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0343320369720459 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022919178009033203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:00:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -8151,117 +4786,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.12037968635559 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 4593.0}, {"feature": 4.0}, {"feature": 8787.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006389617919921875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13800:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13800", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006568593730061024 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011300299670221532 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005380049988161772 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002820253372192383 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 64 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.796543 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 756 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.71824}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997945}, "timestamp": {"timestamp": 1683550838.71824}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.71824}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.71824}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.71824}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027392864227294922 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.7968819 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.7968819 -} -kpi_value { - floatVal: 0.999499142 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073549.7968819 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073549.7968819 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073549.7968819 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.796882}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.8083}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99949914}, "timestamp": {"timestamp": 1682073549.796882}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999795}, "timestamp": {"timestamp": 1683550838.8083}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.796882}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.8083}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.796882}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.8083}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.796882}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.8083}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06329512596130371 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05103659629821777 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -8281,117 +4900,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.18936276435852 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 5991.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004868507385253906 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 65 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.865105 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.939433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99979556}, "timestamp": {"timestamp": 1683550838.939433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.939433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.939433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550838.939433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033681631088256836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.865567 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.865567 -} -kpi_value { - floatVal: 0.999507 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073549.865567 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073549.865567 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073549.865567 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.865567}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.016488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999507}, "timestamp": {"timestamp": 1682073549.865567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997961}, "timestamp": {"timestamp": 1683550839.016488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.865567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.016488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.865567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.016488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.865567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.016488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05353856086730957 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038797855377197266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -8411,117 +4984,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.24921774864197 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 7389.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014903545379638672 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 66 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.927551 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.122822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997966}, "timestamp": {"timestamp": 1683550839.122822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.122822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.122822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.122822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04048514366149902 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.9285331 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.9285331 -} -kpi_value { - floatVal: 0.99951458 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073549.9285331 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073549.9285331 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073549.9285331 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.928533}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.22469}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995146}, "timestamp": {"timestamp": 1682073549.928533}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997971}, "timestamp": {"timestamp": 1683550839.22469}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.928533}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.22469}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.928533}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.22469}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.928533}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.22469}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04619765281677246 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028496742248535156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -8541,117 +5068,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.30403566360474 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008482933044433594 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 67 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:09.980594 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.295717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99979764}, "timestamp": {"timestamp": 1683550839.295717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.295717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.295717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.295717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04015326499938965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073549.9814961 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073549.9814961 -} -kpi_value { - floatVal: 0.999521911 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073549.9814961 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073549.9814961 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073549.9814961 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.981496}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.383662}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995219}, "timestamp": {"timestamp": 1682073549.981496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997981}, "timestamp": {"timestamp": 1683550839.383662}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.981496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.383662}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.981496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.383662}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073549.981496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.383662}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031026124954223633 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '21/04/2023 10:39:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.048288822174072266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -8671,117 +5152,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.34139585494995 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005903244018554688 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 68 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.017040 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.4734}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99979866}, "timestamp": {"timestamp": 1683550839.4734}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.4734}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.4734}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.4734}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03463554382324219 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.0176 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.0176 -} -kpi_value { - floatVal: 0.999493241 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073550.0176 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073550.0176 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073550.0176 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.0176}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.587962}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99949324}, "timestamp": {"timestamp": 1682073550.0176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99979913}, "timestamp": {"timestamp": 1683550839.587962}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.0176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.587962}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.0176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.587962}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.0176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.587962}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026513338088989258 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04922604560852051 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13800:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '13800', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -8801,117 +5236,59 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.37334203720093 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 6.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005779266357421875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1250.0}, {"feature": 9.0}, {"feature": 2148.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1886.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1250.0}, {"feature": 9.0}, {"feature": 2148.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1886.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25464:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25464", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 549.0}, {"feature": 9.0}, {"feature": 1582.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25464:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25464", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 549.0}, {"feature": 9.0}, {"feature": 1582.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25464:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25464", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 549.0}, {"feature": 8.0}, {"feature": 1232.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1244.0}, {"feature": 8.0}, {"feature": 2294.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2462.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 1244.0}, {"feature": 8.0}, {"feature": 2294.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2462.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42038:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42038", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42038:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42038", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4040:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4040", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 20.0}, {"feature": 19.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2615.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006572943342427626 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011293466587131826 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005386769771575928 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004009723663330078 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 69 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.048573 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 757 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.0490489 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.0490489 -} -kpi_value { - floatVal: 0.999500692 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073550.0490489 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073550.0490489 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073550.0490489 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.049049}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.711568}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995007}, "timestamp": {"timestamp": 1682073550.049049}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99979967}, "timestamp": {"timestamp": 1683550839.711568}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.049049}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.711568}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.049049}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.711568}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.049049}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.711568}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05797839164733887 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04395914077758789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -8931,117 +5308,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.43680453300476 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009441375732421875 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 70 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.113626 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.810915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980015}, "timestamp": {"timestamp": 1683550839.810915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.810915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.810915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.810915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03357219696044922 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.1145511 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.1145511 -} -kpi_value { - floatVal: 0.999507904 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073550.1145511 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073550.1145511 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073550.1145511 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.114551}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.898602}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995079}, "timestamp": {"timestamp": 1682073550.114551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998007}, "timestamp": {"timestamp": 1683550839.898602}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.114551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.898602}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.114551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.898602}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.114551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.898602}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.036062002182006836 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03844261169433594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25464:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25464', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -9061,117 +5392,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.48022389411926 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010247230529785156 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 71 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.157497 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.989121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980116}, "timestamp": {"timestamp": 1683550839.989121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.989121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.989121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550839.989121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.045598506927490234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25464:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25464', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.171592 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.171592 -} -kpi_value { - floatVal: 0.999514937 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073550.171592 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073550.171592 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073550.171592 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.171592}} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.083576}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99951494}, "timestamp": {"timestamp": 1682073550.171592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980164}, "timestamp": {"timestamp": 1683550840.083576}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.171592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.083576}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.171592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.083576}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.171592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.083576}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04987907409667969 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03376173973083496 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25464:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25464', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -9191,117 +5476,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.53936171531677 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010821819305419922 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 72 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.216365 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.166234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998021}, "timestamp": {"timestamp": 1683550840.166234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.166234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.166234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.166234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.046518802642822266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.217406 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.217406 -} -kpi_value { - floatVal: 0.999521792 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073550.217406 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073550.217406 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073550.217406 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.217406}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.265846}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995218}, "timestamp": {"timestamp": 1682073550.217406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980265}, "timestamp": {"timestamp": 1683550840.265846}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.217406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.265846}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.217406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.265846}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.217406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.265846}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05605292320251465 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039650917053222656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -9321,117 +5560,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.60440444946289 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015058517456054688 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 73 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.284718 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.2856531 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.2856531 -} -kpi_value { - floatVal: 0.999528408 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073550.2856531 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073550.2856531 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073550.2856531 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.285653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.354536}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995284}, "timestamp": {"timestamp": 1682073550.285653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998031}, "timestamp": {"timestamp": 1683550840.354536}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.285653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.354536}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.285653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.354536}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.285653}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.354536}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05547499656677246 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07179808616638184 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42038:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42038', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -9451,117 +5602,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.6701488494873 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007672309875488281 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 74 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.347351 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.485552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998036}, "timestamp": {"timestamp": 1683550840.485552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.485552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.485552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.485552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04605746269226074 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42038:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42038', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.348002 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.348002 -} -kpi_value { - floatVal: 0.999502 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073550.348002 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073550.348002 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073550.348002 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.348002}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.580105}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999502}, "timestamp": {"timestamp": 1682073550.348002}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998041}, "timestamp": {"timestamp": 1683550840.580105}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.348002}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.580105}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.348002}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.580105}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.348002}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.580105}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04725027084350586 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04069256782531738 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4040:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4040', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -9581,117 +5686,59 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.72403264045715 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00046896934509277344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53507:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53507", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 10.0}, {"feature": 8.0}, {"feature": 549.0}, {"feature": 4.0}, {"feature": 616.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53507:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53507", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 10.0}, {"feature": 8.0}, {"feature": 549.0}, {"feature": 4.0}, {"feature": 616.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42056:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42056", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 4593.0}, {"feature": 14.0}, {"feature": 21369.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13233:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13233", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 18.0}, {"feature": 1460.0}, {"feature": 10.0}, {"feature": 3280.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2751.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43651:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43651", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1267.0}, {"feature": 10.0}, {"feature": 2340.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2462.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1267.0}, {"feature": 10.0}, {"feature": 2340.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2462.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1267.0}, {"feature": 9.0}, {"feature": 2317.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2462.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006573604868133958 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011286029288689878 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005392015154939145 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026204586029052734 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 75 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.399306 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 758 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.3995321 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.3995321 -} -kpi_value { - floatVal: 0.99947983 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073550.3995321 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073550.3995321 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073550.3995321 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.399532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.789426}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99947983}, "timestamp": {"timestamp": 1682073550.399532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980456}, "timestamp": {"timestamp": 1683550840.789426}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.399532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.789426}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.399532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.789426}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.399532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.789426}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024295568466186523 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02486705780029297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53507:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '53507', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -9711,117 +5758,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.75297379493713 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004329681396484375 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 76 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.427766 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.862891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980503}, "timestamp": {"timestamp": 1683550840.862891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.862891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.862891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.862891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05101895332336426 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53507:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '53507', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.4279661 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.4279661 -} -kpi_value { - floatVal: 0.99945277 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073550.4279661 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073550.4279661 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073550.4279661 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.427966}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.956163}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99945277}, "timestamp": {"timestamp": 1682073550.427966}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998055}, "timestamp": {"timestamp": 1683550840.956163}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.427966}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.956163}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.427966}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.956163}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.427966}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550840.956163}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.020854711532592773 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.041673898696899414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42056:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42056', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -9841,117 +5842,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.77802276611328 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003516674041748047 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 77 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.453277 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.056212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999806}, "timestamp": {"timestamp": 1683550841.056212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.056212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.056212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.056212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03478193283081055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13233:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13233', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.4715061 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.4715061 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.99946 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073550.4715061 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073550.4715061 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073550.4715061 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.471506}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.131112}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99946}, "timestamp": {"timestamp": 1682073550.471506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980646}, "timestamp": {"timestamp": 1683550841.131112}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.471506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.131112}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.471506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.131112}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.471506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.131112}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04744839668273926 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031842708587646484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -9971,117 +5926,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.83016347885132 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00044274330139160156 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 78 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.504971 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.204045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980694}, "timestamp": {"timestamp": 1683550841.204045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.204045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.204045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.204045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03355669975280762 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.505183 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.505183 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999467 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073550.505183 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073550.505183 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073550.505183 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.505183}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.307374}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999467}, "timestamp": {"timestamp": 1682073550.505183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980736}, "timestamp": {"timestamp": 1683550841.307374}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.505183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.307374}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.505183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.307374}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.505183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.307374}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027480602264404297 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042464494705200195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43651:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '43651', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -10101,117 +6010,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.86193108558655 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005371570587158203 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 79 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.575489 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.575959 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.575959 -} -kpi_value { - floatVal: 0.99947387 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073550.575959 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073550.575959 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073550.575959 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.575959}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.397089}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99947387}, "timestamp": {"timestamp": 1682073550.575959}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99980783}, "timestamp": {"timestamp": 1683550841.397089}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.575959}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.397089}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.575959}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.397089}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.575959}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.397089}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04580569267272949 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03322935104370117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -10231,117 +6052,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 105.95093870162964 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004937648773193359 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 80 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.625851 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.473692}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998083}, "timestamp": {"timestamp": 1683550841.473692}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.473692}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.473692}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.473692}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025860071182250977 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.626085 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073550.626085 -} -kpi_value { - floatVal: 0.999450088 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073550.626085 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073550.626085 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073550.626085 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.626085}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.54064}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994501}, "timestamp": {"timestamp": 1682073550.626085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998088}, "timestamp": {"timestamp": 1683550841.54064}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.626085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.54064}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.626085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.54064}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.626085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.54064}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0456843376159668 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030652761459350586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -10361,117 +6136,59 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.0009696483612 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005488395690917969 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1267.0}, {"feature": 10.0}, {"feature": 2340.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2462.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29344:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29344", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 14.0}, {"feature": 12.0}, {"feature": 1158.0}, {"feature": 6.0}, {"feature": 1853.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 775.0}, {"feature": 3.0}, {"feature": 842.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29344:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29344", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 1158.0}, {"feature": 5.0}, {"feature": 1490.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 775.0}, {"feature": 3.0}, {"feature": 842.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29344:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29344", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 14.0}, {"feature": 12.0}, {"feature": 1158.0}, {"feature": 6.0}, {"feature": 1853.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 775.0}, {"feature": 3.0}, {"feature": 842.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29344:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29344", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 1158.0}, {"feature": 5.0}, {"feature": 1490.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 775.0}, {"feature": 3.0}, {"feature": 842.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29344:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29344", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 795.0}, {"feature": 4.0}, {"feature": 1127.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 775.0}, {"feature": 3.0}, {"feature": 842.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12226:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12226", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 1783.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12226:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12226", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 1783.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45832:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45832", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 17.0}, {"feature": 15.0}, {"feature": 551.0}, {"feature": 7.0}, {"feature": 1169.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45832:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45832", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 16.0}, {"feature": 903.0}, {"feature": 8.0}, {"feature": 1521.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006573205269727125 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011278597402057454 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005397260538302362 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002473592758178711 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 81 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.676270 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 759 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.6765051 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073550.6765051 -} -kpi_value { - floatVal: 0.999425113 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073550.6765051 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073550.6765051 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073550.6765051 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.676505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.656495}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994251}, "timestamp": {"timestamp": 1682073550.676505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998092}, "timestamp": {"timestamp": 1683550841.656495}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.676505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.656495}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.676505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.656495}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.676505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.656495}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028163671493530273 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024909019470214844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -10491,117 +6208,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.03410816192627 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005137920379638672 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 82 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:10.709426 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.725043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998097}, "timestamp": {"timestamp": 1683550841.725043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.725043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.725043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.725043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04710865020751953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29344:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29344', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073550.7096341 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073550.7096341 -} -kpi_value { - floatVal: 0.999432206 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073550.7096341 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073550.7096341 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073550.7096341 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.709634}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.813305}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994322}, "timestamp": {"timestamp": 1682073550.709634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998101}, "timestamp": {"timestamp": 1683550841.813305}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.709634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.813305}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.709634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.813305}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073550.709634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.813305}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06771063804626465 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:10', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022214174270629883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29344:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29344', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -10621,117 +6292,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.10656237602234 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007152557373046875 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 83 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.023360 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.884722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998106}, "timestamp": {"timestamp": 1683550841.884722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.884722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.884722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.884722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02872323989868164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29344:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29344', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.0238161 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.0238161 -} -kpi_value { - floatVal: 0.999413073 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.0238161 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.0238161 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.0238161 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.023816}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.957325}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994131}, "timestamp": {"timestamp": 1682073551.023816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981105}, "timestamp": {"timestamp": 1683550841.957325}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.023816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.957325}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.023816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.957325}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.023816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550841.957325}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03484797477722168 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023569822311401367 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29344:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29344', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -10751,117 +6376,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.38761138916016 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004699230194091797 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 84 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.064444 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.023507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998115}, "timestamp": {"timestamp": 1683550842.023507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.023507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.023507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.023507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0423130989074707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29344:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29344', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.0646379 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.0646379 -} -kpi_value { - floatVal: 0.999420166 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.0646379 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.0646379 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.0646379 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.064638}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.107206}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99942017}, "timestamp": {"timestamp": 1682073551.064638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998119}, "timestamp": {"timestamp": 1683550842.107206}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.064638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.107206}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.064638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.107206}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.064638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.107206}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026336669921875 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03440284729003906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12226:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12226', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -10881,117 +6460,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.4205310344696 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005767345428466797 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 85 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.096283 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.0964689 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.0964689 -} -kpi_value { - floatVal: 0.99942708 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073551.0964689 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073551.0964689 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073551.0964689 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.096469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.18807}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994271}, "timestamp": {"timestamp": 1682073551.096469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981236}, "timestamp": {"timestamp": 1683550842.18807}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.096469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.18807}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.096469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.18807}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.096469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.18807}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029632091522216797 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0350346565246582 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12226:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12226', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -11011,117 +6502,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.45533800125122 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005307197570800781 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 86 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.130995 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.26323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998128}, "timestamp": {"timestamp": 1683550842.26323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.26323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.26323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.26323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032642364501953125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45832:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45832', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073551.131376 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.131376 -} -kpi_value { - floatVal: 0.999433815 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.131376 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.131376 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.131376 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.131376}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.341849}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994338}, "timestamp": {"timestamp": 1682073551.131376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981326}, "timestamp": {"timestamp": 1683550842.341849}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.131376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.341849}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.131376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.341849}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.131376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.341849}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06275343894958496 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02480173110961914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45832:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45832', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -11141,117 +6586,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.52313494682312 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50995:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50995", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005276203155517578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45832:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45832", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 16.0}, {"feature": 14.0}, {"feature": 551.0}, {"feature": 7.0}, {"feature": 1169.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45832:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45832", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 16.0}, {"feature": 903.0}, {"feature": 8.0}, {"feature": 1521.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53507:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53507", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 549.0}, {"feature": 4.0}, {"feature": 616.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53507:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53507", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 11.0}, {"feature": 9.0}, {"feature": 549.0}, {"feature": 4.0}, {"feature": 616.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13233:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13233", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 18.0}, {"feature": 1460.0}, {"feature": 10.0}, {"feature": 3280.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1446.0}, {"feature": 8.0}, {"feature": 3181.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13233:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13233", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 20.0}, {"feature": 1460.0}, {"feature": 10.0}, {"feature": 3280.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1446.0}, {"feature": 8.0}, {"feature": 3181.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13233:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13233", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 19.0}, {"feature": 1460.0}, {"feature": 10.0}, {"feature": 3280.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1446.0}, {"feature": 8.0}, {"feature": 3181.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25464:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25464", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 549.0}, {"feature": 9.0}, {"feature": 1582.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42058:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42058", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 11583.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006576055722880962 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011271448397650059 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000539918546564877 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003963947296142578 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 87 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.198001 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 760 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.443643}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998137}, "timestamp": {"timestamp": 1683550842.443643}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.443643}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.443643}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.443643}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033651113510131836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45832:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45832', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.198215 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.198215 -} -kpi_value { - floatVal: 0.999440372 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.198215 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.198215 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.198215 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.198215}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.541733}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994404}, "timestamp": {"timestamp": 1682073551.198215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998141}, "timestamp": {"timestamp": 1683550842.541733}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.198215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.541733}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.198215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.541733}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.198215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.541733}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023943424224853516 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50995:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50995', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03250479698181152 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45832:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45832', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -11271,117 +6700,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.55130934715271 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00042819976806640625 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 88 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.242122 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.622027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998145}, "timestamp": {"timestamp": 1683550842.622027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.622027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.622027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.622027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05767226219177246 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53507:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '53507', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.242317 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073551.242317 -} -kpi_value { - floatVal: 0.999446809 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.242317 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.242317 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.242317 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.242317}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.742428}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994468}, "timestamp": {"timestamp": 1682073551.242317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999815}, "timestamp": {"timestamp": 1683550842.742428}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.242317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.742428}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.242317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.742428}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.242317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.742428}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05256819725036621 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027007102966308594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53507:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '53507', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -11401,117 +6784,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.6240873336792 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00037598609924316406 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 89 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.298743 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.809155}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998154}, "timestamp": {"timestamp": 1683550842.809155}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.809155}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.809155}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.809155}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030896663665771484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13233:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13233', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.299051 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.299051 -} -kpi_value { - floatVal: 0.999453127 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.299051 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.299051 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.299051 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.299051}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.907688}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994531}, "timestamp": {"timestamp": 1682073551.299051}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998158}, "timestamp": {"timestamp": 1683550842.907688}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.299051}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.907688}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.299051}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.907688}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.299051}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.907688}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04795384407043457 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03862810134887695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13233:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13233', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -11531,117 +6868,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.67608666419983 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00037479400634765625 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 90 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.350677 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.992839}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981624}, "timestamp": {"timestamp": 1683550842.992839}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.992839}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.992839}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550842.992839}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022719144821166992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13233:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13233', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.3509691 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.3509691 -} -kpi_value { - floatVal: 0.999459267 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.3509691 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.3509691 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.3509691 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.350969}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.065678}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99945927}, "timestamp": {"timestamp": 1682073551.350969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981666}, "timestamp": {"timestamp": 1683550843.065678}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.350969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.065678}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.350969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.065678}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.350969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.065678}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02584528923034668 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05068206787109375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25464:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25464', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -11661,117 +6952,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.70607256889343 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00035071372985839844 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 91 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.381435 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.3825319 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.3825319 -} -kpi_value { - floatVal: 0.999465287 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073551.3825319 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073551.3825319 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073551.3825319 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.382532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.184398}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994653}, "timestamp": {"timestamp": 1682073551.382532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998171}, "timestamp": {"timestamp": 1683550843.184398}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.382532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.184398}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.382532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.184398}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.382532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.184398}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0315394401550293 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026806116104125977 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42058:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42058', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -11791,117 +6994,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.74323654174805 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004878044128417969 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 92 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.418176 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.41837 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.41837 -} -kpi_value { - floatVal: 0.999471128 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073551.41837 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073551.41837 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073551.41837 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.41837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.25188}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994711}, "timestamp": {"timestamp": 1682073551.41837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998175}, "timestamp": {"timestamp": 1683550843.25188}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.41837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.25188}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.41837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.25188}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.41837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.25188}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.053781986236572266 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025304079055786133 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -11921,117 +7036,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.80134463310242 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003676414489746094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60225:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60225", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52128:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26576:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26576", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006572097581511414 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011264568801387374 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005397260538302362 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0024275779724121094 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 93 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.476413 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 761 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.390481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998179}, "timestamp": {"timestamp": 1683550843.390481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.390481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.390481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.390481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07299542427062988 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.476696 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.476696 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.99947691 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.476696 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.476696 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.476696 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.476696}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.51956}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994769}, "timestamp": {"timestamp": 1682073551.476696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998183}, "timestamp": {"timestamp": 1683550843.51956}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.476696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.51956}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.476696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.51956}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.476696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.51956}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02832174301147461 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.19088959693908691 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60225:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '60225', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -12051,117 +7150,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.83411407470703 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 9.0}, {"feature": 7.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003941059112548828 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 94 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.514983 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.764949}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981874}, "timestamp": {"timestamp": 1683550843.764949}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.764949}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.764949}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.764949}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03705906867980957 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073551.5152619 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.5152619 -} -kpi_value { - floatVal: 0.999482512 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.5152619 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.5152619 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.5152619 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.515262}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.845403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994825}, "timestamp": {"timestamp": 1682073551.515262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981916}, "timestamp": {"timestamp": 1683550843.845403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.515262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.845403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.515262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.845403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.515262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.845403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06173539161682129 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042116641998291016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -12181,117 +7234,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.90616512298584 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004100799560546875 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 95 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.581079 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.930053}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998196}, "timestamp": {"timestamp": 1683550843.930053}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.930053}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.930053}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550843.930053}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.055316925048828125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52128:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.5812969 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.5812969 -} -kpi_value { - floatVal: 0.999488 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.5812969 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.5812969 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.5812969 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.581297}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.0303}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999488}, "timestamp": {"timestamp": 1682073551.581297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981993}, "timestamp": {"timestamp": 1683550844.0303}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.581297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.0303}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.581297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.0303}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.581297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.0303}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03541421890258789 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02757406234741211 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -12311,117 +7318,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.94589471817017 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00036072731018066406 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 96 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.620716 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.106911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982035}, "timestamp": {"timestamp": 1683550844.106911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.106911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.106911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.106911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025608062744140625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.6209691 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.6209691 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.99949342 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.6209691 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.6209691 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.6209691 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.620969}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.180026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9994934}, "timestamp": {"timestamp": 1682073551.620969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982077}, "timestamp": {"timestamp": 1683550844.180026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.620969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.180026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.620969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.180026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.620969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.180026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04053783416748047 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025821447372436523 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26576:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26576', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -12441,117 +7402,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 106.99067783355713 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003840923309326172 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 97 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.665095 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.66531 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.66531 -} -kpi_value { - floatVal: 0.999498665 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073551.66531 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073551.66531 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073551.66531 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.66531}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.249068}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99949867}, "timestamp": {"timestamp": 1682073551.66531}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998212}, "timestamp": {"timestamp": 1683550844.249068}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.66531}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.249068}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.66531}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.249068}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.66531}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.249068}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039103031158447266 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03339576721191406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -12571,117 +7444,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.03363108634949 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003731250762939453 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 98 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.708481 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.70869 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.70869 -} -kpi_value { - floatVal: 0.999503851 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073551.70869 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073551.70869 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073551.70869 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.70869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.36447}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99950385}, "timestamp": {"timestamp": 1682073551.70869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982154}, "timestamp": {"timestamp": 1683550844.36447}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.70869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.36447}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.70869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.36447}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.70869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.36447}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037935733795166016 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04112863540649414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -12701,117 +7486,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.07582473754883 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50756:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50756", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005419254302978516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006572701692491956 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011257187260982496 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000539918546564877 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002527952194213867 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 99 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.751181 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 762 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.512463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982196}, "timestamp": {"timestamp": 1683550844.512463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.512463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.512463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.512463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022574901580810547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:00:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.751451 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.751451 -} -kpi_value { - floatVal: 0.999508917 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.751451 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.751451 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.751451 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.751451}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.588305}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995089}, "timestamp": {"timestamp": 1682073551.751451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999817}, "timestamp": {"timestamp": 1683550844.588305}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.751451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.588305}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.751451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.588305}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.751451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.588305}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.043598175048828125 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50756:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '50756', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04147768020629883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -12831,117 +7600,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.12436723709106 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004582405090332031 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 100 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.799542 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.669423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981743}, "timestamp": {"timestamp": 1683550844.669423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.669423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.669423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.669423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.046941518783569336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.7998259 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.7998259 -} -kpi_value { - floatVal: 0.999513865 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.7998259 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.7998259 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.7998259 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.799826}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.757427}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99951386}, "timestamp": {"timestamp": 1682073551.799826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981785}, "timestamp": {"timestamp": 1683550844.757427}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.799826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.757427}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.799826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.757427}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.799826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.757427}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02598714828491211 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04910778999328613 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -12961,122 +7684,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.15537428855896 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0008045835742662051 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005533438473263436 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023665900005198637 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.08170819282531738 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 101 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.911413 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.849615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981827}, "timestamp": {"timestamp": 1683550844.849615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.849615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.849615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.849615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04287075996398926 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.911664 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073551.911664 -} -kpi_value { - floatVal: 0.999518752 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.911664 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.911664 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.911664 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.911664}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.934891}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99951875}, "timestamp": {"timestamp": 1682073551.911664}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998186}, "timestamp": {"timestamp": 1683550844.934891}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.911664}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.934891}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.911664}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.934891}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.911664}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550844.934891}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03120136260986328 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04710841178894043 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -13096,122 +7768,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.2720673084259 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000799789813734552 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005506457720908178 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023701200001369216 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019505023956298828 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 102 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.948641 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.043156}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981904}, "timestamp": {"timestamp": 1683550845.043156}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.043156}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.043156}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.043156}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03061366081237793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.9488871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.9488871 -} -kpi_value { - floatVal: 0.99952352 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073551.9488871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073551.9488871 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073551.9488871 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.948887}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.123108}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995235}, "timestamp": {"timestamp": 1682073551.948887}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981946}, "timestamp": {"timestamp": 1683550845.123108}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.948887}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.123108}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.948887}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.123108}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.948887}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.123108}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028454065322875977 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029515504837036133 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -13231,122 +7852,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.30653929710388 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007939586310769601 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00547997860596847 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023665900005198637 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014851093292236328 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 103 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:11.983498 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073551.983721 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073551.983721 -} -kpi_value { - floatVal: 0.99952817 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073551.983721 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073551.983721 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073551.983721 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.983721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.202844}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99952817}, "timestamp": {"timestamp": 1682073551.983721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998198}, "timestamp": {"timestamp": 1683550845.202844}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.983721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.202844}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.983721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.202844}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073551.983721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.202844}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02396845817565918 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05391812324523926 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -13366,122 +7894,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.33690977096558 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007878615192402969 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005453919960167072 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023618900002020382 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014514923095703125 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 104 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.012621 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.012876 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.012876 -} -kpi_value { - floatVal: 0.999532759 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073552.012876 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073552.012876 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073552.012876 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.012876}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.310767}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99953276}, "timestamp": {"timestamp": 1682073552.012876}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982023}, "timestamp": {"timestamp": 1683550845.310767}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.012876}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.310767}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.012876}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.310767}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.012876}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.310767}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06539154052734375 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04959273338317871 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -13501,122 +7936,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.40744352340698 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007822722666755258 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005428186054050292 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023571899998842127 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001468658447265625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006569813826178758 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011250090359057768 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005397260538302362 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026221275329589844 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 105 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.083211 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 763 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.440209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998206}, "timestamp": {"timestamp": 1683550845.440209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.440209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.440209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.440209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022533178329467773 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.083451 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.083451 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.99953723 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.083451 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073552.083451 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073552.083451 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.083451}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.507401}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995372}, "timestamp": {"timestamp": 1682073552.083451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999821}, "timestamp": {"timestamp": 1683550845.507401}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.083451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.507401}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.083451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.507401}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.083451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.507401}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02665543556213379 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031162023544311523 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -13636,122 +8050,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.43924236297607 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:58060:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "58060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007764966698198135 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0054028448761534705 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023378599996703997 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013682842254638672 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 106 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.115850 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.597175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982136}, "timestamp": {"timestamp": 1683550845.597175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.597175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.597175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.597175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034905433654785156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.1160879 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.1160879 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.99954164 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.1160879 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073552.1160879 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073552.1160879 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.116088}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.673591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99954164}, "timestamp": {"timestamp": 1682073552.116088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998218}, "timestamp": {"timestamp": 1683550845.673591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.116088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.673591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.116088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.673591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.116088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.673591}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06540560722351074 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:58060:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '58060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028254270553588867 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -13771,122 +8134,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.51072931289673 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 8.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007709838785125035 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00537783819032174 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023185299994565867 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014998912811279297 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 107 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.186459 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.743224}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982214}, "timestamp": {"timestamp": 1683550845.743224}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.743224}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.743224}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.743224}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04763364791870117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073552.1867139 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.1867139 -} -kpi_value { - floatVal: 0.999546 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.1867139 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073552.1867139 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073552.1867139 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.186714}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.841679}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999546}, "timestamp": {"timestamp": 1682073552.186714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982256}, "timestamp": {"timestamp": 1683550845.841679}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.186714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.841679}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.186714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.841679}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.186714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.841679}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03486323356628418 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023940086364746094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -13906,122 +8218,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.55076837539673 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 10.0}, {"feature": 7.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 331.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007671081851920344 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0053530330170350054 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023378599996703997 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018050670623779297 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 108 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.226884 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.907628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998229}, "timestamp": {"timestamp": 1683550845.907628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.907628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.907628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550845.907628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02364945411682129 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.227114 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.227114 -} -kpi_value { - floatVal: 0.999550223 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.227114 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073552.227114 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073552.227114 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.227114}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.000746}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995502}, "timestamp": {"timestamp": 1682073552.227114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99982333}, "timestamp": {"timestamp": 1683550846.000746}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.227114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.000746}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.227114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.000746}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.227114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.000746}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04462313652038574 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025905370712280273 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:00:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -14041,122 +8302,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.6009635925293 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 7.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007615637889974747 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005328732764266404 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023185299994565867 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015850067138671875 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 109 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.276848 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.06763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998191}, "timestamp": {"timestamp": 1683550846.06763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.06763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.06763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.06763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02756500244140625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:00:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.2770751 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.2770751 -} -kpi_value { - floatVal: 0.999554396 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.2770751 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073552.2770751 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073552.2770751 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.277075}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.137631}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995544}, "timestamp": {"timestamp": 1682073552.277075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981403}, "timestamp": {"timestamp": 1683550846.137631}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.277075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.137631}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.277075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.137631}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.277075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.137631}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.045337677001953125 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03972792625427246 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -14176,122 +8386,59 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.65164065361023 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 10.0}, {"feature": 7.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 331.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007578076545521319 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005304600905748552 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023378599996703997 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019533634185791016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6531:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6531", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.10:57766:94.23.23.52:443", "ip_d": "94.23.23.52", "ip_o": "10.100.200.10", "port_d": "443", "port_o": "57766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1358.0}, {"feature": 5.0}, {"feature": 1358.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 2213.0}, {"feature": 4.0}, {"feature": 2213.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.10:57766:94.23.23.52:443", "ip_d": "94.23.23.52", "ip_o": "10.100.200.10", "port_d": "443", "port_o": "57766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 1358.0}, {"feature": 5.0}, {"feature": 1358.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2305.0}, {"feature": 5.0}, {"feature": 2305.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.10:57766:94.23.23.52:443", "ip_d": "94.23.23.52", "ip_o": "10.100.200.10", "port_d": "443", "port_o": "57766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1358.0}, {"feature": 5.0}, {"feature": 1358.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2305.0}, {"feature": 5.0}, {"feature": 2305.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42052:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42052", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 4593.0}, {"feature": 15.0}, {"feature": 24165.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42052:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42052", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 4593.0}, {"feature": 15.0}, {"feature": 24165.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42052:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42052", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 4593.0}, {"feature": 15.0}, {"feature": 24165.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2907:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2907", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2907:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2907", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2907:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2907", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006575265509827326 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011243733797782912 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000539918546564877 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004441022872924805 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 110 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.328202 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 764 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.328454 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.328454 -} -kpi_value { - floatVal: 0.999558449 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073552.328454 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073552.328454 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073552.328454 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.328454}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.305613}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99955845}, "timestamp": {"timestamp": 1682073552.328454}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981445}, "timestamp": {"timestamp": 1683550846.305613}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.328454}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.305613}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.328454}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.305613}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.328454}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.305613}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.052083492279052734 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04638504981994629 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6531:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '6531', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -14311,122 +8458,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.70975708961487 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 7.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007532283964030432 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0052808706485102394 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023571899998842127 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016765594482421875 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 111 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.402393 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.4026649 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.4026649 -} -kpi_value { - floatVal: 0.999562502 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073552.4026649 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073552.4026649 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073552.4026649 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.402665}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.400039}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995625}, "timestamp": {"timestamp": 1682073552.402665}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99981487}, "timestamp": {"timestamp": 1683550846.400039}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.402665}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.400039}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.402665}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.400039}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.402665}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550846.400039}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027202367782592773 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024407386779785156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9999993443489075, 'timestamp': '08/05/2023 13:00:46', 'ip_o': '10.100.200.10', 'ip_d': '94.23.23.52', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.10:57766:94.23.23.52:443', 'protocol': 'TCP', 'port_o': '57766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -14446,122 +8500,79 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.75947618484497 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 8.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000749697035720333 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005257374121224018 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023618900002020382 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016865730285644531 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 112 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.435865 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.999999344 +timestamp: "08/05/2023 13:00:46" +ip_o: "10.100.200.10" +ip_d: "94.23.23.52" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.10:57766:94.23.23.52:443" +protocol: "TCP" +port_o: "57766" +port_d: "443" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.4361739 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } } -timestamp { - timestamp: 1682073552.4361739 -} -kpi_value { - floatVal: 0.999566436 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } } -} -timestamp { - timestamp: 1682073552.4361739 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } -} -timestamp { - timestamp: 1682073552.4361739 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } } -timestamp { - timestamp: 1682073552.4361739 -} -kpi_value { - int32Val: 0 -} +time_start: 1.68355059e+09 +time_end: 1.68355085e+09 -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.436174}} +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 29 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.6622033280436881 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550847.153595}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99956644}, "timestamp": {"timestamp": 1682073552.436174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550847.153595}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.436174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550847.153595}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.436174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550847.153595}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.436174}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550847.153595}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042996883392333984 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03229403495788574 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9999993443489075, 'timestamp': '08/05/2023 13:00:46', 'ip_o': '10.100.200.10', 'ip_d': '94.23.23.52', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.10:57766:94.23.23.52:443', 'protocol': 'TCP', 'port_o': '57766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -14581,122 +8592,79 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.80818128585815 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62055:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62055", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 8.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 2.0}, {"feature": 264.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007453584070857027 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005234261102425426 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023665900005198637 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018470287322998047 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 113 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.484808 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.999999344 +timestamp: "08/05/2023 13:00:46" +ip_o: "10.100.200.10" +ip_d: "94.23.23.52" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.10:57766:94.23.23.52:443" +protocol: "TCP" +port_o: "57766" +port_d: "443" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.4852231 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } } -timestamp { - timestamp: 1682073552.4852231 -} -kpi_value { - floatVal: 0.99957031 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } } -} -timestamp { - timestamp: 1682073552.4852231 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } -} -timestamp { - timestamp: 1682073552.4852231 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } } -timestamp { - timestamp: 1682073552.4852231 -} -kpi_value { - int32Val: 0 -} +time_start: 1.68355059e+09 +time_end: 1.68355085e+09 -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.485223}} +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 30 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.5919148900429718 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550847.849244}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995703}, "timestamp": {"timestamp": 1682073552.485223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550847.849244}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.485223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550847.849244}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.485223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550847.849244}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.485223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550847.849244}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035677433013916016 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62055:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62055', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0383756160736084 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9999993443489075, 'timestamp': '08/05/2023 13:00:46', 'ip_o': '10.100.200.10', 'ip_d': '94.23.23.52', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.10:57766:94.23.23.52:443', 'protocol': 'TCP', 'port_o': '57766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -14716,122 +8684,79 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.84995818138123 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 4593.0}, {"feature": 12.0}, {"feature": 19971.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007425611754450457 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0052113380819138345 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023701200001369216 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025322437286376953 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 114 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.527372 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.999999344 +timestamp: "08/05/2023 13:00:46" +ip_o: "10.100.200.10" +ip_d: "94.23.23.52" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.10:57766:94.23.23.52:443" +protocol: "TCP" +port_o: "57766" +port_d: "443" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.5276351 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } } -timestamp { - timestamp: 1682073552.5276351 -} -kpi_value { - floatVal: 0.999574125 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } } -} -timestamp { - timestamp: 1682073552.5276351 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } -} -timestamp { - timestamp: 1682073552.5276351 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } } -timestamp { - timestamp: 1682073552.5276351 -} -kpi_value { - int32Val: 0 -} +time_start: 1.68355059e+09 +time_end: 1.68355085e+09 -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.527635}} +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 31 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.9598157299915329 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550848.949974}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995741}, "timestamp": {"timestamp": 1682073552.527635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550848.949974}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.527635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550848.949974}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.527635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550848.949974}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.527635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550848.949974}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06293749809265137 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06025838851928711 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42052:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42052', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -14851,122 +8776,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.91980814933777 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 12981.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007392041478327803 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005188754420159593 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023736499997539795 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019617080688476562 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 115 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.596733 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.5970571 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.5970571 -} -kpi_value { - floatVal: 0.99957782 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073552.5970571 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073552.5970571 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073552.5970571 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.597057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.093821}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995778}, "timestamp": {"timestamp": 1682073552.597057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550849.093821}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.597057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.093821}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.597057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.093821}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.597057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.093821}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03054356575012207 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042917490005493164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42052:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42052', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -14986,122 +8818,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 107.95677733421326 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 12981.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007359760948343686 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005166456663532461 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002382654999451006 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001931905746459961 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 116 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.671614 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.671989 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.671989 -} -kpi_value { - floatVal: 0.999581516 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073552.671989 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073552.671989 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073552.671989 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.671989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.178348}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995815}, "timestamp": {"timestamp": 1682073552.671989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550849.178348}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.671989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.178348}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.671989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.178348}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.671989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.178348}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04100370407104492 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03587031364440918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42052:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42052', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -15121,122 +8860,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.04217100143433 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 4593.0}, {"feature": 10.0}, {"feature": 17175.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007322075641093403 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005144490525776758 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00023916599991480325 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019283294677734375 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 117 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.719045 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.719331 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.719331 -} -kpi_value { - floatVal: 0.999585092 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073552.719331 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073552.719331 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073552.719331 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.719331}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.255418}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995851}, "timestamp": {"timestamp": 1682073552.719331}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550849.255418}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.719331}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.255418}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.719331}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.255418}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.719331}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.255418}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.056168556213378906 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06299138069152832 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2907:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2907', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -15256,122 +8902,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.10480189323425 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 4593.0}, {"feature": 11.0}, {"feature": 18573.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007282890084812314 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005122820806869793 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024043549990437896 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0027027130126953125 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 118 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.784451 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.360126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550849.360126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.360126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.360126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.360126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038581132888793945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2907:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2907', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.785166 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.785166 -} -kpi_value { - floatVal: 0.999588668 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.785166 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073552.785166 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073552.785166 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.785166}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.438132}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99958867}, "timestamp": {"timestamp": 1682073552.785166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550849.438132}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.785166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.438132}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.785166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.438132}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.785166}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.438132}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03986239433288574 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03232216835021973 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:00:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2907:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2907', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -15391,122 +8986,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.1537971496582 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 14379.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007243965042078787 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005101426176350048 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024170499989395466 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019211769104003906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54913:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54913", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2306.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2457.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54913:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54913", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2306.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2457.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54431:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54431", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 14.0}, {"feature": 13.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 1783.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54431:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54431", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 1783.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42054:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42054", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 4593.0}, {"feature": 15.0}, {"feature": 22767.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25442:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25442", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 18.0}, {"feature": 1169.0}, {"feature": 8.0}, {"feature": 1758.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2173.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25442:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25442", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 18.0}, {"feature": 1169.0}, {"feature": 8.0}, {"feature": 1758.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2173.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 1.0}, {"feature": 4593.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006605798953815418 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001126803280372526 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005401110392995179 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0055582523345947266 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 119 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.830807 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 765 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.553238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550849.553238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.553238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.553238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.553238}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03983330726623535 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54913:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54913', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.8310549 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.8310549 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999592125 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.8310549 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073552.8310549 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073552.8310549 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.831055}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.641622}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995921}, "timestamp": {"timestamp": 1682073552.831055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550849.641622}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.831055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.641622}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.831055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.641622}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.831055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.641622}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04577517509460449 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026899099349975586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54913:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54913', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -15526,122 +9100,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.20598268508911 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 15777.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007205090333390747 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005080302763610731 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024184049993891676 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017342567443847656 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 120 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.882416 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.718314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550849.718314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.718314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.718314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.718314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025887489318847656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54431:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54431', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.8827081 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.8827081 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999595582 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.8827081 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073552.8827081 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073552.8827081 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.882708}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.799357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995956}, "timestamp": {"timestamp": 1682073552.882708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550849.799357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.882708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.799357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.882708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.799357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.882708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.799357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030486106872558594 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042513370513916016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54431:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54431', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -15661,122 +9184,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.24232912063599 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42012:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 4593.0}, {"feature": 6.0}, {"feature": 11583.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007157016033110913 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005059540303230886 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024170499989395466 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005707740783691406 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 121 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.924784 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.884058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550849.884058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.884058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.884058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.884058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02706146240234375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42054:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42054', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073552.9250181 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.9250181 -} -kpi_value { - floatVal: 0.99959892 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073552.9250181 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073552.9250181 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073552.9250181 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.925018}} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.96275}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995989}, "timestamp": {"timestamp": 1682073552.925018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550849.96275}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.925018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.96275}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.925018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.96275}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.925018}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550849.96275}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0620880126953125 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42012:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027154207229614258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25442:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25442', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -15796,122 +9268,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.31627917289734 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007119301475462575 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0050389325978869555 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024184049993891676 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014910697937011719 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 122 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:12.992431 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073552.9926491 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073552.9926491 -} -kpi_value { - floatVal: 0.999602258 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073552.9926491 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073552.9926491 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073552.9926491 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.992649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.08434}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99960226}, "timestamp": {"timestamp": 1682073552.992649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550850.08434}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.992649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.08434}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.992649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.08434}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073552.992649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.08434}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04216909408569336 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026704072952270508 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25442:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25442', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -15931,122 +9310,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.36521363258362 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007076560813064178 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.005018629371737875 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024170499989395466 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0033538341522216797 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 123 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.046467 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.0470769 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.0470769 -} -kpi_value { - floatVal: 0.999605536 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073553.0470769 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073553.0470769 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073553.0470769 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.047077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.158499}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99960554}, "timestamp": {"timestamp": 1682073553.047077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550850.158499}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.047077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.158499}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.047077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.158499}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.047077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.158499}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05014514923095703 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03631019592285156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -16066,122 +9352,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.42619562149048 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007049378871023061 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004998442907090589 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024184049993891676 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019834041595458984 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 124 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.104185 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.237287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550850.237287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.237287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.237287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.237287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02335381507873535 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:00:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.1044061 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.1044061 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999608755 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.1044061 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.1044061 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.1044061 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.104406}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.310183}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99960876}, "timestamp": {"timestamp": 1682073553.104406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550850.310183}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.104406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.310183}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.104406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.310183}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.104406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.310183}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033791542053222656 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02752399444580078 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -16201,122 +9436,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.46750736236572 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:55705:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "55705", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0007010144080059035 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004978600693048191 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024170499989395466 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001806020736694336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 1.0}, {"feature": 4593.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:28012:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "28012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 199.0}, {"feature": 3.0}, {"feature": 331.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:28012:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "28012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 398.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:28012:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "28012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 465.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:28012:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "28012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 398.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49725:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49725", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1306.0}, {"feature": 11.0}, {"feature": 2189.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 2339.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006640201201054508 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011300805132460918 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005404025432653725 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.006361722946166992 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 125 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.145850 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 766 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.454903}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550850.454903}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.454903}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.454903}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.454903}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0648953914642334 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:00:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.1460869 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.1460869 -} -kpi_value { - floatVal: 0.999611855 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.1460869 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.1460869 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.1460869 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.146087}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.57485}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99961185}, "timestamp": {"timestamp": 1682073553.146087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550850.57485}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.146087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.57485}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.146087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.57485}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.146087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.57485}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04781079292297363 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:55705:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '55705', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03186225891113281 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -16336,122 +9550,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.52341771125793 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006977368650856829 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0049589403779117264 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024184049993891676 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002241373062133789 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 126 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.201195 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.65828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550850.65828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.65828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.65828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.65828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028098344802856445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.2015951 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.2015951 -} -kpi_value { - floatVal: 0.999615 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.2015951 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.2015951 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.2015951 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.201595}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.738424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999615}, "timestamp": {"timestamp": 1682073553.201595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550850.738424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.201595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.738424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.201595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.738424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.201595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.738424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07639193534851074 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04381370544433594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -16471,122 +9634,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.60755944252014 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 4593.0}, {"feature": 14.0}, {"feature": 21369.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006943828740223959 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004939521884819404 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024197599998387886 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018630027770996094 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 127 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.284880 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.82893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550850.82893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.82893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.82893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.82893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.044121503829956055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.2858231 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.2858231 -} -kpi_value { - floatVal: 0.999618053 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.2858231 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.2858231 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.2858231 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.285823}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.919422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99961805}, "timestamp": {"timestamp": 1682073553.285823}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550850.919422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.285823}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.919422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.285823}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.919422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.285823}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550850.919422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03150367736816406 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0624384880065918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:28012:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '28012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -16606,122 +9718,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.64702653884888 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 4593.0}, {"feature": 12.0}, {"feature": 18573.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006906185937562981 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004920371916196121 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024184049993891676 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001505136489868164 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 128 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.330477 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.021859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550851.021859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.021859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.021859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.021859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04137468338012695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:28012:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '28012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.330704 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.330704 -} -kpi_value { - floatVal: 0.999621034 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.330704 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.330704 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.330704 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.330704}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.102901}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99962103}, "timestamp": {"timestamp": 1682073553.330704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550851.102901}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.330704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.102901}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.330704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.102901}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.330704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.102901}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0725100040435791 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030394792556762695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:28012:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '28012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -16741,122 +9802,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.7324287891388 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 4593.0}, {"feature": 13.0}, {"feature": 19971.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006872393953551372 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0049014127087243595 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024197599998387886 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00177001953125 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 129 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.409493 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.174517}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550851.174517}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.174517}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.174517}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.174517}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029998779296875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:28012:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '28012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.40971 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.40971 -} -kpi_value { - floatVal: 0.999624 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.40971 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.40971 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.40971 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.40971}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.246116}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999624}, "timestamp": {"timestamp": 1682073553.40971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550851.246116}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.40971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.246116}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.40971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.246116}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.40971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.246116}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03263139724731445 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04161262512207031 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49725:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49725', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -16876,122 +9886,59 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.77171397209167 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 4593.0}, {"feature": 11.0}, {"feature": 17175.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006836661461604238 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004882693396872448 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024184049993891676 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021190643310546875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49725:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49725", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 19.0}, {"feature": 1306.0}, {"feature": 11.0}, {"feature": 2189.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 2339.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49725:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49725", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 19.0}, {"feature": 1306.0}, {"feature": 11.0}, {"feature": 2189.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 2339.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49725:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49725", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 20.0}, {"feature": 1306.0}, {"feature": 11.0}, {"feature": 2189.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 2339.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 396.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57664:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57664", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 14.0}, {"feature": 11.0}, {"feature": 849.0}, {"feature": 4.0}, {"feature": 849.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57664:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57664", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 15.0}, {"feature": 12.0}, {"feature": 849.0}, {"feature": 4.0}, {"feature": 849.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37575:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37575", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 23.0}, {"feature": 20.0}, {"feature": 1043.0}, {"feature": 6.0}, {"feature": 1242.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3634.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37575:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37575", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 24.0}, {"feature": 21.0}, {"feature": 1043.0}, {"feature": 6.0}, {"feature": 1242.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3634.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 5991.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006653165058906747 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001129913396325582 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005406940472312272 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004857063293457031 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 130 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.449165 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 767 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.4715149 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.4715149 -} -kpi_value { - floatVal: 0.999626935 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073553.4715149 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073553.4715149 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073553.4715149 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.471515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.513862}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99962693}, "timestamp": {"timestamp": 1682073553.471515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550851.513862}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.471515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.513862}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.471515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.513862}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.471515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.513862}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0655515193939209 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0467219352722168 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49725:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49725', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -17011,122 +9958,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.84425640106201 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 4593.0}, {"feature": 10.0}, {"feature": 15777.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006806096106931419 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004864146305811404 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024197599998387886 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019321441650390625 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 131 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.523982 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.615072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550851.615072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.615072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.615072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.615072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04828977584838867 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49725:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49725', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.524256 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.524256 -} -kpi_value { - floatVal: 0.999629796 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.524256 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.524256 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.524256 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.524256}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.715412}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996298}, "timestamp": {"timestamp": 1682073553.524256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550851.715412}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.524256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.715412}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.524256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.715412}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.524256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.715412}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06040143966674805 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04574751853942871 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49725:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49725', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -17146,122 +10042,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.9140088558197 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42010:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42010", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006778531894000976 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0048457891814462735 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024228050000374424 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021698474884033203 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 132 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.591348 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.817917}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550851.817917}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.817917}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.817917}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.817917}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0302121639251709 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.591733 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.591733 -} -kpi_value { - floatVal: 0.999632597 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.591733 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.591733 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.591733 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.591733}} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.892965}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996326}, "timestamp": {"timestamp": 1682073553.591733}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550851.892965}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.591733}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.892965}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.591733}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.892965}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.591733}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.892965}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04262042045593262 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42010:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42010', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.036850929260253906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -17281,122 +10126,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 108.96339702606201 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006744969022612626 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004827691559723495 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024197599998387886 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005751848220825195 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 133 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.646659 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.973506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550851.973506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.973506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.973506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550851.973506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030313491821289062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57664:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57664', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.6469309 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.6469309 -} -kpi_value { - floatVal: 0.999635398 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.6469309 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.6469309 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.6469309 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.646931}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.04403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996354}, "timestamp": {"timestamp": 1682073553.646931}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.04403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.646931}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.04403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.646931}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.04403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.646931}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.04403}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0576024055480957 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03288412094116211 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57664:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57664', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -17416,122 +10210,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.03370547294617 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006716885373190229 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004809753097752739 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024228050000374424 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001943349838256836 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 134 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.710873 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.7111051 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.7111051 -} -kpi_value { - floatVal: 0.99963814 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073553.7111051 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073553.7111051 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073553.7111051 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.711105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.118146}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99963814}, "timestamp": {"timestamp": 1682073553.711105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.118146}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.711105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.118146}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.711105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.118146}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.711105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.118146}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.050287723541259766 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042638540267944336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37575:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37575', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -17551,122 +10252,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.09058737754822 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006685171777833064 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004792046707232525 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002425850000236096 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015914440155029297 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 135 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.766476 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.201862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.201862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.201862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.201862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.201862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027678251266479492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37575:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37575', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.766705 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.766705 -} -kpi_value { - floatVal: 0.999640822 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.766705 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.766705 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.766705 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.766705}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.275295}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996408}, "timestamp": {"timestamp": 1682073553.766705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.275295}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.766705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.275295}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.766705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.275295}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.766705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.275295}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.046700477600097656 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04462075233459473 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -17686,122 +10336,59 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.14264345169067 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 6.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006653122426523423 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004774541600051807 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024228050000374424 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015583038330078125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 4593.0}, {"feature": 4.0}, {"feature": 8787.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 7389.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 4593.0}, {"feature": 5.0}, {"feature": 10185.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42040:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42040", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42040:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42040", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2907:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2907", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:28012:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "28012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 465.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53681:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53681", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53681:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53681", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4040:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4040", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 24.0}, {"feature": 23.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2615.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000665213260466165 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011291811563048813 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005408560100477189 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0024521350860595703 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 136 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.818584 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 768 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.818831 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.818831 -} -kpi_value { - floatVal: 0.999627709 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073553.818831 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073553.818831 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073553.818831 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.818831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.389848}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996277}, "timestamp": {"timestamp": 1682073553.818831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.389848}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.818831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.389848}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.818831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.389848}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.818831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.389848}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0441591739654541 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030251264572143555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -17821,122 +10408,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.19217228889465 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006621564890565423 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0047572267044700975 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024197599998387886 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001463174819946289 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 137 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.867759 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.461903}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.461903}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.461903}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.461903}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.461903}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026597023010253906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.867995 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.867995 -} -kpi_value { - floatVal: 0.999630451 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.867995 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.867995 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.867995 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.867995}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.53858}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99963045}, "timestamp": {"timestamp": 1682073553.867995}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.53858}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.867995}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.53858}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.867995}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.53858}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.867995}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.53858}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05415463447570801 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028450489044189453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -17956,122 +10492,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.25174331665039 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006598902681216516 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004740033256285914 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024228050000374424 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0039064884185791016 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 138 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.930981 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.615676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.615676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.615676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.615676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.615676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03262782096862793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42040:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42040', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.9333079 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.9333079 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999633133 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.9333079 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.9333079 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.9333079 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.933308}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.692034}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99963313}, "timestamp": {"timestamp": 1682073553.933308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.692034}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.933308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.692034}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.933308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.692034}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.933308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.692034}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04488849639892578 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027158498764038086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42040:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42040', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -18091,122 +10576,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.30550575256348 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000658054834537933 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0047230012162986735 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002425850000236096 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0022869110107421875 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 139 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:13.985121 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.780618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.780618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.780618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.780618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.780618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0325777530670166 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2907:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2907', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073553.9858479 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073553.9858479 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999635756 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073553.9858479 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073553.9858479 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073553.9858479 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.985848}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.854415}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99963576}, "timestamp": {"timestamp": 1682073553.985848}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.854415}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.985848}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.854415}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.985848}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.854415}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073553.985848}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.854415}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035338401794433594 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026126384735107422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:28012:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '28012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -18226,122 +10660,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.3505642414093 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006552717928627772 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004706217507525139 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024307000001044798 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025322437286376953 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 140 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.028084 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073554.029283 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073554.029283 -} -kpi_value { - floatVal: 0.999638379 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073554.029283 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073554.029283 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073554.029283 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.029283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.924056}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996384}, "timestamp": {"timestamp": 1682073554.029283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550852.924056}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.029283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.924056}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.029283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.924056}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.029283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550852.924056}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033883094787597656 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03278160095214844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53681:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '53681', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -18361,122 +10702,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.39212274551392 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006758344893674119 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004695806343436414 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024355499999728636 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.006090402603149414 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 141 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.073638 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.01171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550853.01171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.01171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.01171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.01171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034043073654174805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53681:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '53681', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073554.0740671 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073554.0740671 -} -kpi_value { - floatVal: 0.999641 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073554.0740671 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073554.0740671 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073554.0740671 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.074067}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.093811}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999641}, "timestamp": {"timestamp": 1682073554.074067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550853.093811}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.074067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.093811}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.074067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.093811}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.074067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.093811}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07786178588867188 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0477597713470459 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4040:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4040', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -18496,122 +10786,59 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.48132658004761 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006730921760620245 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0046793559042860085 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002436794999880476 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015711784362792969 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4040:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4040", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 21.0}, {"feature": 20.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2615.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4040:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4040", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 23.0}, {"feature": 22.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2615.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4040:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4040", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 20.0}, {"feature": 19.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2615.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37575:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37575", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 25.0}, {"feature": 22.0}, {"feature": 1043.0}, {"feature": 6.0}, {"feature": 1242.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 3657.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37575:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37575", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 24.0}, {"feature": 21.0}, {"feature": 1043.0}, {"feature": 6.0}, {"feature": 1242.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 3657.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49904:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49904", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 621.0}, {"feature": 3.0}, {"feature": 621.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49904:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49904", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 621.0}, {"feature": 3.0}, {"feature": 621.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1250.0}, {"feature": 9.0}, {"feature": 2148.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 1446.0}, {"feature": 8.0}, {"feature": 3176.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 1250.0}, {"feature": 9.0}, {"feature": 2148.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 1446.0}, {"feature": 8.0}, {"feature": 3176.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1250.0}, {"feature": 9.0}, {"feature": 2148.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1446.0}, {"feature": 7.0}, {"feature": 2746.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000665151988327508 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011284480070032344 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005410179728642106 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028841495513916016 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 142 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.178799 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 769 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073554.1790221 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073554.1790221 -} -kpi_value { - floatVal: 0.999643505 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073554.1790221 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073554.1790221 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073554.1790221 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.179022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.222488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996435}, "timestamp": {"timestamp": 1682073554.179022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550853.222488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.179022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.222488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.179022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.222488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.179022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.222488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05831551551818848 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027014493942260742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4040:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4040', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -18631,122 +10858,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.56687641143799 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006706976713347968 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004663053117584441 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024380399997880886 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002888917922973633 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 143 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.246779 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.308337}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550853.308337}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.308337}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.308337}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.308337}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030287742614746094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4040:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4040', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073554.2472479 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073554.2472479 -} -kpi_value { - floatVal: 0.999646068 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073554.2472479 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073554.2472479 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073554.2472479 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.247248}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.390531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99964607}, "timestamp": {"timestamp": 1682073554.247248}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550853.390531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.247248}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.390531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.247248}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.390531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.247248}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.390531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05585193634033203 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028965473175048828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4040:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4040', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -18766,122 +10942,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.6320116519928 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006675781111174691 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004646983490087884 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002436794999880476 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014226436614990234 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 144 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.312385 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.49696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550853.49696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.49696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.49696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.49696}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029408931732177734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37575:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37575', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073554.312587 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073554.312587 -} -kpi_value { - floatVal: 0.999648511 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073554.312587 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073554.312587 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073554.312587 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.312587}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.585855}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996485}, "timestamp": {"timestamp": 1682073554.312587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550853.585855}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.312587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.585855}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.312587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.585855}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.312587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.585855}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.13454985618591309 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04481172561645508 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37575:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37575', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -18901,122 +11026,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.77635669708252 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006952916827654478 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004642857561152089 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024380399997880886 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.006523847579956055 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 145 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.471502 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.674108}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550853.674108}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.674108}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.674108}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.674108}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05791521072387695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49904:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49904', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073554.4719 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073554.4719 -} -kpi_value { - floatVal: 0.999650955 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073554.4719 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073554.4719 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073554.4719 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.4719}} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.804121}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99965096}, "timestamp": {"timestamp": 1682073554.4719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550853.804121}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.4719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.804121}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.4719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.804121}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.4719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.804121}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04880189895629883 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0304720401763916 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49904:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49904', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -19036,122 +11110,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.84968662261963 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45128:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006937119109662266 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004626969148987392 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024382850000392864 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020902156829833984 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 146 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.537106 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073554.537313 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073554.537313 -} -kpi_value { - floatVal: 0.999638617 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073554.537313 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073554.537313 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073554.537313 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.537313}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.875765}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996386}, "timestamp": {"timestamp": 1682073554.537313}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550853.875765}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.537313}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.875765}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.537313}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.875765}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.537313}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.875765}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04632091522216797 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45128:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026689529418945312 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -19171,122 +11152,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 109.91298389434814 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 7.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006906530476263921 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004611352424684762 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024385300002904842 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018596649169921875 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 147 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.801848 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.949928}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550853.949928}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.949928}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.949928}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550853.949928}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03383183479309082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073554.8020921 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073554.8020921 -} -kpi_value { - floatVal: 0.999626458 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073554.8020921 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073554.8020921 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073554.8020921 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.802092}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.03038}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99962646}, "timestamp": {"timestamp": 1682073554.802092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.03038}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.802092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.03038}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.802092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.03038}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.802092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.03038}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.036870479583740234 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029875993728637695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -19306,122 +11236,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.16820907592773 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 6.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006876848243318573 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004595888028552806 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002439560000198071 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017180442810058594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 1250.0}, {"feature": 9.0}, {"feature": 2148.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 3606.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1273.0}, {"feature": 10.0}, {"feature": 2171.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 3606.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 199.0}, {"feature": 6.0}, {"feature": 597.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 199.0}, {"feature": 4.0}, {"feature": 463.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 530.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61214:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 19.0}, {"feature": 15.0}, {"feature": 903.0}, {"feature": 7.0}, {"feature": 1519.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61214:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 14.0}, {"feature": 903.0}, {"feature": 7.0}, {"feature": 1519.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42058:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42058", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 17.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1446.0}, {"feature": 6.0}, {"feature": 2311.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 16.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 5.0}, {"feature": 1881.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006651556857879722 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011277150151551981 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005410649755503982 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003103494644165039 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 148 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.845079 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 770 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.130136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.130136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.130136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.130136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.130136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034912109375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073554.845541 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073554.845541 -} -kpi_value { - floatVal: 0.999629 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073554.845541 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073554.845541 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073554.845541 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.845541}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.20626}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999629}, "timestamp": {"timestamp": 1682073554.845541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.20626}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.845541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.20626}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.845541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.20626}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.845541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.20626}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0464329719543457 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04671907424926758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -19441,122 +11350,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.2209644317627 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25890:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25890", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 8.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006845032281953597 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004580603155286983 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024385300002904842 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0022780895233154297 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 149 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.898973 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.293621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.293621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.293621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.293621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.293621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04007315635681152 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073554.899164 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073554.899164 -} -kpi_value { - floatVal: 0.999631524 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073554.899164 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073554.899164 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073554.899164 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.899164}} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.375054}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996315}, "timestamp": {"timestamp": 1682073554.899164}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.375054}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.899164}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.375054}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.899164}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.375054}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.899164}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.375054}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040961265563964844 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25890:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25890', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03654670715332031 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -19576,122 +11434,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.26944375038147 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006820250266741823 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0045654091651662915 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002439560000198071 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020258426666259766 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 150 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.950678 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.457639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.457639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.457639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.457639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.457639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028107166290283203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073554.9509449 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073554.9509449 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999634 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073554.9509449 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073554.9509449 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073554.9509449 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.950945}} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.532558}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999634}, "timestamp": {"timestamp": 1682073554.950945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.532558}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.950945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.532558}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.950945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.532558}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.950945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.532558}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03810691833496094 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028515100479125977 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61214:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -19711,122 +11518,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.31835198402405 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006791943576234382 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004550398872098457 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002440590000105658 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0022439956665039062 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 151 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:14.995080 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.622791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.622791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.622791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.622791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.622791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029054880142211914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61214:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073554.9953711 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073554.9953711 -} -kpi_value { - floatVal: 0.999636471 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073554.9953711 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073554.9953711 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073554.9953711 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.995371}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.698596}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996365}, "timestamp": {"timestamp": 1682073554.995371}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.698596}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.995371}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.698596}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.995371}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.698596}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073554.995371}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.698596}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0311431884765625 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026516437530517578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42058:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42058', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -19846,122 +11602,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.35567831993103 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000676240565797427 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004535550993453784 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002439560000198071 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017194747924804688 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 152 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.032390 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.0327041 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.0327041 -} -kpi_value { - floatVal: 0.999638855 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073555.0327041 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073555.0327041 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073555.0327041 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.032704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.784239}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99963886}, "timestamp": {"timestamp": 1682073555.032704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.784239}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.032704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.784239}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.032704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.784239}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.032704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.784239}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05569100379943848 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04186749458312988 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -19981,122 +11644,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.41767835617065 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006729473071971286 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004520886959597756 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024385300002904842 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018377304077148438 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 153 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.095117 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.0953541 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.0953541 -} -kpi_value { - floatVal: 0.99964124 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073555.0953541 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073555.0953541 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073555.0953541 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.095354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.867727}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99964124}, "timestamp": {"timestamp": 1682073555.095354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.867727}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.095354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.867727}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.095354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.867727}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.095354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.867727}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03384828567504883 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021973848342895508 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -20116,122 +11686,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.45840120315552 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45128:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006697959740336046 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004506353439691082 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024382850000392864 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015552043914794922 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 19.0}, {"feature": 15.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 5.0}, {"feature": 1881.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 16.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1446.0}, {"feature": 6.0}, {"feature": 2311.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:59372:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "59372", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 21.0}, {"feature": 1192.0}, {"feature": 12.0}, {"feature": 2384.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 2649.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:59372:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "59372", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 21.0}, {"feature": 1192.0}, {"feature": 12.0}, {"feature": 2384.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2626.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54431:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54431", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 1283.0}, {"feature": 8.0}, {"feature": 2141.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54431:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54431", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 1283.0}, {"feature": 10.0}, {"feature": 2857.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54431:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54431", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1283.0}, {"feature": 9.0}, {"feature": 2499.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14518:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14518", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 17.0}, {"feature": 15.0}, {"feature": 795.0}, {"feature": 8.0}, {"feature": 2285.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1645.0}, {"feature": 5.0}, {"feature": 2080.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14518:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14518", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 16.0}, {"feature": 795.0}, {"feature": 8.0}, {"feature": 2285.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1645.0}, {"feature": 5.0}, {"feature": 2080.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2706.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006649611245547258 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011269963768004764 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005410179728642106 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0032045841217041016 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 154 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.136582 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 771 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.958292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550854.958292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.958292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.958292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550854.958292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027546405792236328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.13681 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073555.13681 -} -kpi_value { - floatVal: 0.999643564 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.13681 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.13681 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.13681 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.13681}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.037866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99964356}, "timestamp": {"timestamp": 1682073555.13681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550855.037866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.13681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.037866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.13681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.037866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.13681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.037866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0449678897857666 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45128:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.055556535720825195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -20251,122 +11800,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.51096725463867 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45128:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45128", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006669291742010471 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00449193417668313 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024380399997880886 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014193058013916016 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 155 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.186740 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.162498}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550855.162498}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.162498}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.162498}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.162498}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06832718849182129 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:59372:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '59372', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.1870911 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.1870911 -} -kpi_value { - floatVal: 0.999630272 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.1870911 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.1870911 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.1870911 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.187091}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.300627}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996303}, "timestamp": {"timestamp": 1682073555.187091}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550855.300627}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.187091}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.300627}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.187091}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.300627}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.187091}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.300627}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03312563896179199 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45128:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45128', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04112863540649414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:59372:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '59372', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -20386,122 +11884,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.54928302764893 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006639680769309892 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004477665566934759 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002436794999880476 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016679763793945312 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 156 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.226578 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.397077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550855.397077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.397077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.397077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.397077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02731466293334961 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54431:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54431', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.2268291 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.2268291 -} -kpi_value { - floatVal: 0.999616206 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.2268291 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.2268291 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.2268291 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.226829}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.473412}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996162}, "timestamp": {"timestamp": 1682073555.226829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550855.473412}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.226829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.473412}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.226829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.473412}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.226829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.473412}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05352973937988281 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0282745361328125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54431:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54431', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -20521,122 +11968,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.60948491096497 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006606685350399544 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004463572957456258 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024355499999728636 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014200210571289062 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 157 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.284988 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.55078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550855.55078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.55078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.55078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.55078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03764200210571289 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54431:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54431', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.2852769 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.2852769 -} -kpi_value { - floatVal: 0.999603271 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.2852769 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.2852769 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.2852769 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.285277}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.633433}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9996033}, "timestamp": {"timestamp": 1682073555.285277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550855.633433}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.285277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.633433}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.285277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.633433}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.285277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.633433}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024839401245117188 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035820722579956055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14518:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14518', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -20656,122 +12052,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.63938808441162 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:43006:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "43006", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006576130443113182 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004449590015395677 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024307000001044798 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019769668579101562 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 158 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.316133 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.316453 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.316453 -} -kpi_value { - floatVal: 0.999589562 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073555.316453 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073555.316453 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073555.316453 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.316453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.712424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99958956}, "timestamp": {"timestamp": 1682073555.316453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550855.712424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.316453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.712424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.316453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.712424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.316453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.712424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08060741424560547 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:43006:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '43006', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03884625434875488 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14518:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14518', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -20791,122 +12094,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.726322889328 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006549520691903052 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0044357016347266005 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002425850000236096 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003317594528198242 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 159 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.406432 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.4067459 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.4067459 -} -kpi_value { - floatVal: 0.999578655 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073555.4067459 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073555.4067459 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073555.4067459 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.406746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.793677}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99957865}, "timestamp": {"timestamp": 1682073555.406746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550855.793677}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.406746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.793677}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.406746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.793677}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.406746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.793677}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04012918472290039 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034024953842163086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -20926,122 +12136,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.77595591545105 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 4593.0}, {"feature": 4.0}, {"feature": 7389.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006527262250081378 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004421907414555812 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024307000001044798 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016582012176513672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 1384.0}, {"feature": 10.0}, {"feature": 2683.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2706.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 1384.0}, {"feature": 10.0}, {"feature": 2683.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29344:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29344", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 15.0}, {"feature": 13.0}, {"feature": 1158.0}, {"feature": 6.0}, {"feature": 1853.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1210.0}, {"feature": 4.0}, {"feature": 1277.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29344:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29344", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 14.0}, {"feature": 12.0}, {"feature": 1158.0}, {"feature": 6.0}, {"feature": 1853.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1210.0}, {"feature": 4.0}, {"feature": 1277.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 18.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 1922.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 18.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1899.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006649230492700596 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011262667165556736 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005410649755503982 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003249645233154297 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 160 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.473954 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 772 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.898975}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550855.898975}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.898975}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.898975}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.898975}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02312946319580078 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073555.474215 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.474215 -} -kpi_value { - floatVal: 0.999565303 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.474215 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.474215 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.474215 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.474215}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.962854}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995653}, "timestamp": {"timestamp": 1682073555.474215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550855.962854}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.474215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.962854}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.474215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.962854}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.474215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550855.962854}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028621673583984375 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029898643493652344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -21061,122 +12250,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.83199286460876 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 4593.0}, {"feature": 5.0}, {"feature": 8787.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006498767329277646 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004408300746053349 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002425850000236096 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014407634735107422 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 161 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.507819 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.034387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550856.034387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.034387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.034387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.034387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023179054260253906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.5081639 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.5081639 -} -kpi_value { - floatVal: 0.999568 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.5081639 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.5081639 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.5081639 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.508164}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.102806}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999568}, "timestamp": {"timestamp": 1682073555.508164}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550856.102806}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.508164}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.102806}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.508164}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.102806}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.508164}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.102806}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023604631423950195 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025165081024169922 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29344:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29344', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -21196,122 +12334,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.86082100868225 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006470454753170605 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0043948206498027565 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024228050000374424 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015113353729248047 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 162 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.573960 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.184483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550856.184483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.184483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.184483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.184483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025248289108276367 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29344:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29344', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.5742109 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.5742109 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999570668 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.5742109 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.5742109 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.5742109 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.574211}} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.26539}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99957067}, "timestamp": {"timestamp": 1682073555.574211}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550856.26539}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.574211}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.26539}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.574211}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.26539}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.574211}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.26539}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0376737117767334 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023452043533325195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -21331,122 +12418,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 110.94104552268982 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006445649202538457 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004381432620209713 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002425850000236096 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014328956604003906 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 163 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.617145 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.337544}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550856.337544}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.337544}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.337544}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.337544}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02342081069946289 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.617532 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.617532 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.99957335 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.617532 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.617532 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.617532 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.617532}} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.417528}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99957335}, "timestamp": {"timestamp": 1682073555.617532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550856.417528}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.617532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.417528}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.617532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.417528}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.617532}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.417528}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06151080131530762 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02328801155090332 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -21466,122 +12502,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.00808882713318 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1398.0}, {"feature": 1.0}, {"feature": 1398.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006424089451303 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004368140895454471 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002426500000183296 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017197132110595703 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 164 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.685436 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.6856749 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.6856749 -} -kpi_value { - floatVal: 0.99956286 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073555.6856749 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073555.6856749 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073555.6856749 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.685675}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.506828}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99956286}, "timestamp": {"timestamp": 1682073555.685675}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550856.506828}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.685675}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.506828}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.685675}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.506828}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.685675}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.506828}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03507208824157715 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024638652801513672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -21601,122 +12544,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.04992914199829 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 5991.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006400811030385794 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004354986020772533 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024271500001304958 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001508474349975586 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 165 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.731625 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.73188 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.73188 -} -kpi_value { - floatVal: 0.999565542 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073555.73188 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073555.73188 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073555.73188 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.73188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.587484}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99956554}, "timestamp": {"timestamp": 1682073555.73188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550856.587484}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.73188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.587484}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.73188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.587484}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.73188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.587484}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03986644744873047 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023569107055664062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -21736,122 +12586,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.10095691680908 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006374422469959251 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004341981091571113 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002426500000183296 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014209747314453125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006652177581208172 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001125567762792981 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005411119782365859 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004266262054443359 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 166 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.778246 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 773 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.699953}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550856.699953}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.699953}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.699953}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.699953}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.057747840881347656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.778496 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.778496 -} -kpi_value { - floatVal: 0.999568164 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.778496 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.778496 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.778496 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.778496}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.815917}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99956816}, "timestamp": {"timestamp": 1682073555.778496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550856.815917}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.778496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.815917}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.778496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.815917}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.778496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.815917}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03660702705383301 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04165959358215332 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -21871,122 +12700,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.14423513412476 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006348289640799886 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004329092565180215 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002425850000236096 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013747215270996094 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 167 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.819931 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.916499}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550856.916499}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.916499}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.916499}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550856.916499}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028787612915039062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.820147 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073555.820147 -} -kpi_value { - floatVal: 0.999570727 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.820147 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.820147 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.820147 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.820147}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.019048}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995707}, "timestamp": {"timestamp": 1682073555.820147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.019048}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.820147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.019048}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.820147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.019048}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.820147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.019048}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06598591804504395 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027973175048828125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -22006,122 +12784,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.21532559394836 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006324528511986013 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004316298354057385 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024228050000374424 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014538764953613281 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 168 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.891944 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.09991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.09991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.09991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.09991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.09991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02380847930908203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.89216 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.89216 -} -kpi_value { - floatVal: 0.99957335 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.89216 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.89216 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.89216 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.89216}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.164822}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99957335}, "timestamp": {"timestamp": 1682073555.89216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.164822}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.89216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.164822}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.89216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.164822}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.89216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.164822}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03180646896362305 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02655768394470215 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -22141,122 +12868,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.2531476020813 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 708.0}, {"feature": 1.0}, {"feature": 708.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006303027869906404 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0043035995245943905 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002425850000236096 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017046928405761719 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 169 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.929572 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.238121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.238121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.238121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.238121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.238121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027705669403076172 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.9297831 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.9297831 -} -kpi_value { - floatVal: 0.999575853 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073555.9297831 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073555.9297831 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073555.9297831 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.929783}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.324725}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99957585}, "timestamp": {"timestamp": 1682073555.929783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.324725}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.929783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.324725}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.929783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.324725}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.929783}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.324725}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05157184600830078 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026459693908691406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -22276,122 +12952,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.31057929992676 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 9.0}, {"feature": 7.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006282414353021897 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0042910068867640875 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002426500000183296 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018379688262939453 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 170 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:15.986978 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073555.98718 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073555.98718 -} -kpi_value { - floatVal: 0.999578357 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073555.98718 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073555.98718 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073555.98718 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.98718}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.400839}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99957836}, "timestamp": {"timestamp": 1682073555.98718}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.400839}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.98718}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.400839}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.98718}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.400839}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073555.98718}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.400839}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02316141128540039 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040487051010131836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -22411,122 +12994,29 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.33960270881653 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61577:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61577", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 8.0}, {"feature": 6.0}, {"feature": 199.0}, {"feature": 2.0}, {"feature": 199.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006258809532239372 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004278552381169672 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002425850000236096 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019259452819824219 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 171 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:16.025245 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { - context_uuid { - uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" - } -} -service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073556.0255921 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073556.0255921 -} -kpi_value { - floatVal: 0.99958086 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" - } -} -timestamp { - timestamp: 1682073556.0255921 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" - } -} -timestamp { - timestamp: 1682073556.0255921 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" - } -} -timestamp { - timestamp: 1682073556.0255921 -} -kpi_value { - int32Val: 0 -} - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.025592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.514531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99958086}, "timestamp": {"timestamp": 1682073556.025592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.514531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.025592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.514531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.025592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.514531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.025592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.514531}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05999040603637695 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61577:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '61577', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03289031982421875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -22546,122 +13036,101 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.41473627090454 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000623558918612373 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004266204658755086 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024228050000374424 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017499923706054688 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12050:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550300.0}, "features": [{"feature": 29.0}, {"feature": 25.0}, {"feature": 1483.0}, {"feature": 13.0}, {"feature": 3787.0}, {"feature": 25.0}, {"feature": 25.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2769.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006651845284604084 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011248407962396562 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005412959726527333 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0033032894134521484 seconds INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 172 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:16.096176 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 774 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.631355}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.631355}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.631355}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.631355}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.631355}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03443789482116699 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073556.0963931 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073556.0963931 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -kpi_value { - floatVal: 0.999583304 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073556.0963931 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.0963931 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073556.0963931 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.096393}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.734176}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995833}, "timestamp": {"timestamp": 1682073556.096393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.734176}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.096393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.734176}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.096393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.734176}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.096393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.734176}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06664395332336426 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '21/04/2023 10:39:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024869203567504883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -22681,122 +13150,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9978645443916321 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.49233222007751 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006223156820881956 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004253887965730146 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002425850000236096 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002162456512451172 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 173 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:16.415345 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.820156}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.820156}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.820156}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.820156}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.820156}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025752544403076172 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:00:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } -timestamp { - timestamp: 1682073556.4156661 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073556.4156661 -} -kpi_value { - floatVal: 0.99957329 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073556.4156661 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.4156661 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073556.4156661 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.415666}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.892628}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995733}, "timestamp": {"timestamp": 1682073556.415666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.892628}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.415666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.892628}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.415666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.892628}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.415666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.892628}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04538679122924805 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '21/04/2023 10:39:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024170637130737305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -22816,122 +13234,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9974504113197327 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.79019570350647 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49280:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49280", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006200219712719319 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004241753824704382 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024228050000374424 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001505136489868164 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 174 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:16.466341 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.959079}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550857.959079}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.959079}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.959079}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550857.959079}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.044075965881347656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073556.4665949 -} -kpi_value { - int32Val: 0 + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073556.4665949 -} -kpi_value { - floatVal: 0.999561 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073556.4665949 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.4665949 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073556.4665949 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.466595}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.057476}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.999561}, "timestamp": {"timestamp": 1682073556.466595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.057476}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.466595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.057476}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.466595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.057476}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.466595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.057476}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.048589468002319336 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '21/04/2023 10:39:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49280:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49280', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02387070655822754 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:00:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -22951,122 +13318,71 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 0.9975987672805786 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.84432911872864 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 11583.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006180440971502321 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004229697630942129 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0002425850000236096 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015649795532226562 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 175 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:16.522971 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.123606}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.123606}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.123606}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.123606}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.123606}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02976083755493164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" - } -} -timestamp { - timestamp: 1682073556.523186 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" - } -} -timestamp { - timestamp: 1682073556.523186 -} -kpi_value { - floatVal: 0.999549747 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } } -} -timestamp { - timestamp: 1682073556.523186 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.523186 -} -kpi_value { - int32Val: 0 -} - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" } } -timestamp { - timestamp: 1682073556.523186 -} -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.523186}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.195234}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.99954975}, "timestamp": {"timestamp": 1682073556.523186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.195234}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.523186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.195234}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.523186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.195234}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.523186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.195234}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05288052558898926 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05023384094238281 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -23086,122 +13402,227 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.90524911880493 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 4593.0}, {"feature": 6.0}, {"feature": 10185.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006157495113709191 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.004217773556646403 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024228050000374424 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015454292297363281 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 176 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:16.581685 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.3099}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.3099}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.3099}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.3099}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.3099}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027594327926635742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.5819271 +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.379539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.379539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.379539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.379539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.379539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024384021759033203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12050:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } -timestamp { - timestamp: 1682073556.5819271 -} -kpi_value { - floatVal: 0.99955231 +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.5819271 +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } +, 'time_start': 1683550336.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12050:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550300.0}, "features": [{"feature": 28.0}, {"feature": 24.0}, {"feature": 1483.0}, {"feature": 13.0}, {"feature": 3787.0}, {"feature": 25.0}, {"feature": 25.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2769.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57664:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57664", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 16.0}, {"feature": 13.0}, {"feature": 1169.0}, {"feature": 5.0}, {"feature": 1169.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4564:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4564", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 7.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4564:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4564", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62983:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62983", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 1460.0}, {"feature": 7.0}, {"feature": 2009.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 2045.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62983:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62983", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1460.0}, {"feature": 7.0}, {"feature": 2009.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 2045.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006650357587533372 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011241224777746505 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005414799670688808 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0023870468139648438 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 775 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.473252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.473252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.473252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.473252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.473252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023904085159301758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12050:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.5819271 +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } +, 'time_start': 1683550336.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.538423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.538423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.538423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.538423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.538423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026215791702270508 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57664:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57664', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } -timestamp { - timestamp: 1682073556.5819271 +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } } -kpi_value { - int32Val: 0 +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.581927}} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.604085}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995523}, "timestamp": {"timestamp": 1682073556.581927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.604085}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.581927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.604085}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "16"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.581927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.604085}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.581927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.604085}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03295326232910156 seconds -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '21/04/2023 10:39:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42014:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42014', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03154563903808594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4564:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4564', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } , 'endpoint_id': topology_id { context_id { @@ -23221,105 +13642,44132 @@ device_id { endpoint_uuid { uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } -, 'time_start': 1682073600.0, 'time_end': 1682073600.0} -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections Correctly Classified: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Number of Attack Connections: 0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Overall Detection Accuracy: 1.0 - -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Attack Detection Accuracy: 0.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Confidence: 1.0 -INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Time elapsed: 111.94409894943237 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Exporting prediction accuracy and confidence +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42014:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42014", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "635973d9-976c-4c6f-bb6d-cadca6dd2147"}}, "time_end": 1682073600.0, "time_start": 1682073600.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:batch_size: 1 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (1, 10) -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006133520904027162 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.05613432899997406 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.00013735100003486878 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.00420596232330192 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.00024197599998387886 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014452934265136719 seconds -INFO:root:Inference performed correctly -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 177 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:current_time: 2023-04-21 10:39:16.620132 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_start: 2023-04-21 10:39:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:time_interval_end: 2023-04-21 10:40:05.579445 -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:service_id: context_id { +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.682418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.682418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.682418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.682418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.682418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03651547431945801 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4564:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4564', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "635973d9-976c-4c6f-bb6d-cadca6dd2147" + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" } - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_security_status: kpi_id { - kpi_id { - uuid: "13" +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.62037 +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.804722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.804722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.804722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.804722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.804722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_conf: kpi_id { - kpi_id { - uuid: "14" +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0380253791809082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62983:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62983', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.62037 +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } -kpi_value { - floatVal: 0.999554873 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.892779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.892779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.892779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.892779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.892779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attack_conns: kpi_id { - kpi_id { - uuid: "15" +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030650854110717773 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62983:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62983', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.62037 +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.989831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550858.989831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.989831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.989831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550858.989831}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_compromised_clients: kpi_id { - kpi_id { - uuid: "16" +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028045654296875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.62037 +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.058076}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550859.058076}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.058076}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.058076}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.058076}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:kpi_unique_attackers: kpi_id { - kpi_id { - uuid: "17" +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03310966491699219 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" } } -timestamp { - timestamp: 1682073556.62037 +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } } -kpi_value { - int32Val: 0 +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" } - -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "13"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.62037}} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.133537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550859.133537}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "14"}}, "kpi_value": {"floatVal": 0.9995549}, "timestamp": {"timestamp": 1682073556.62037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.133537}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "15"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1682073556.62037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.133537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.133537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027466535568237305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.205716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550859.205716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.205716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.205716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.205716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02779555320739746 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:00:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42056:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42056", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 4593.0}, {"feature": 15.0}, {"feature": 22767.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000664804242332298 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011234164269062065 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005412959726527333 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002608776092529297 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 776 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.745843}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550859.745843}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.745843}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.745843}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.745843}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06042742729187012 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.852381}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550859.852381}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.852381}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.852381}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.852381}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025786638259887695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.934557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550859.934557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.934557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.934557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550859.934557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039459943771362305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.043217}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550860.043217}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.043217}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.043217}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.043217}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025364160537719727 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:00:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.121132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550860.121132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.121132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.121132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.121132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03543901443481445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.198178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550860.198178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.198178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.198178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.198178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0252230167388916 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.265649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550860.265649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.265649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.265649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.265649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02749347686767578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.360684}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550860.360684}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.360684}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.360684}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.360684}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05105018615722656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.474787}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550860.474787}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.474787}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.474787}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.474787}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02845025062561035 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42056:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42056', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.563109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550860.563109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.563109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.563109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.563109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028813838958740234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:00:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 199.0}, {"feature": 7.0}, {"feature": 664.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 199.0}, {"feature": 7.0}, {"feature": 664.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 6.0}, {"feature": 11583.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1273.0}, {"feature": 11.0}, {"feature": 2194.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 3606.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 19.0}, {"feature": 1273.0}, {"feature": 12.0}, {"feature": 2217.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 3606.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006657460207171124 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011229997596402493 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005414799670688808 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0032737255096435547 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 777 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.668837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550860.668837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.668837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.668837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.668837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031247377395629883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.7614}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550860.7614}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.7614}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.7614}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.7614}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02573084831237793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.846308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550860.846308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.846308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.846308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.846308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0353238582611084 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.940092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550860.940092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.940092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.940092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550860.940092}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05256509780883789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.034869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.034869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.034869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.034869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.034869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03148031234741211 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.111349}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.111349}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.111349}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.111349}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.111349}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029331207275390625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.196843}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.196843}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.196843}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.196843}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.196843}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03910493850708008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.292566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.292566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.292566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.292566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.292566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028681278228759766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.377111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.377111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.377111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.377111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.377111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047904253005981445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.468101}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.468101}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.468101}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.468101}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.468101}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025341272354125977 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1273.0}, {"feature": 11.0}, {"feature": 2194.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 3606.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1273.0}, {"feature": 10.0}, {"feature": 2171.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 3606.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42046:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42046", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42058:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42058", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42058:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42058", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 14379.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42058:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42058", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42058:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42058", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 4593.0}, {"feature": 11.0}, {"feature": 17175.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:59372:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "59372", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 21.0}, {"feature": 1192.0}, {"feature": 12.0}, {"feature": 2384.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 2672.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006666499281907813 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011225606082836928 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005417409702204168 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005092620849609375 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 778 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.565047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.565047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.565047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.565047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.565047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03728604316711426 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.660761}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.660761}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.660761}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.660761}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.660761}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04916667938232422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.759971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.759971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.759971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.759971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.759971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03680300712585449 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42046:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42046', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.840022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.840022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.840022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.840022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.840022}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024350404739379883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.907674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.907674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.907674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.907674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.907674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02476048469543457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42058:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42058', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.973188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550861.973188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.973188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.973188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550861.973188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.044725894927978516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42058:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42058', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.069404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550862.069404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.069404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.069404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.069404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037340641021728516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42058:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42058', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.160143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550862.160143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.160143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.160143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.160143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.053130149841308594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42058:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42058', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.254628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550862.254628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.254628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.254628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.254628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.058089494705200195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:59372:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '59372', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.364359}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550862.364359}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.364359}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.364359}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.364359}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04111647605895996 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21766:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006678973210871516 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011223792753642058 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005420019733719528 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0036461353302001953 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 779 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.500266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550862.500266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.500266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.500266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.500266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03235149383544922 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.57285}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550862.57285}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.57285}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.57285}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.57285}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03227996826171875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21766:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '21766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.645225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550862.645225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.645225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.645225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.645225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028048276901245117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.719997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550862.719997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.719997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.719997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.719997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03545331954956055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.798741}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550862.798741}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.798741}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.798741}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.798741}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03891396522521973 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.888621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550862.888621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.888621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.888621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.888621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030645370483398438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.974916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550862.974916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.974916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.974916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550862.974916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025549888610839844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.062359}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550863.062359}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.062359}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.062359}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.062359}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042413949966430664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.159138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550863.159138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.159138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.159138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.159138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04764604568481445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.256427}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550863.256427}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.256427}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.256427}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.256427}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04542899131774902 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006682104886306498 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011216936266942859 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005425519775599241 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002967357635498047 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 780 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.409834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550863.409834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.409834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.409834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.409834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03304791450500488 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.491986}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550863.491986}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.491986}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.491986}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.491986}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021956443786621094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.564015}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550863.564015}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.564015}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.564015}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.564015}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024129629135131836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.640397}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550863.640397}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.640397}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.640397}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.640397}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.046910762786865234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.742267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550863.742267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.742267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.742267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.742267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02736687660217285 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.820126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550863.820126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.820126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.820126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.820126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02457141876220703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.905775}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550863.905775}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.905775}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.905775}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.905775}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022254228591918945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.989254}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550863.989254}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.989254}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.989254}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550863.989254}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025400161743164062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550864.071062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550864.071062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550864.071062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550864.071062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550864.071062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032662391662597656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550864.152575}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550864.152575}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550864.152575}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550864.152575}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550864.152575}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02432870864868164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000669015219098818 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011212005646113927 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005431019817478955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0035276412963867188 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 781 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:No KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 9.34600830078125e-05 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.325304}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550864.325304}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.325304}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.325304}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.325304}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022026777267456055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.403191}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550864.403191}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.403191}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.403191}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.403191}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037430763244628906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.483522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550864.483522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.483522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.483522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.483522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027008056640625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.560772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550864.560772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.560772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.560772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.560772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0276336669921875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.637303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957293}, "timestamp": {"timestamp": 1683550864.637303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.637303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.637303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.637303}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03183293342590332 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.726067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996441}, "timestamp": {"timestamp": 1683550864.726067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.726067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.726067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.726067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02799534797668457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.808396}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969494}, "timestamp": {"timestamp": 1683550864.808396}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.808396}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.808396}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.808396}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02293682098388672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.901673}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997331}, "timestamp": {"timestamp": 1683550864.901673}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.901673}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.901673}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550864.901673}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05658459663391113 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.012918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997627}, "timestamp": {"timestamp": 1683550865.012918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.012918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.012918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.012918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03350496292114258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 18.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 1945.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006696602584623858 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011206284524307266 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005431934841908514 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002881765365600586 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 782 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.127978}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99978644}, "timestamp": {"timestamp": 1683550865.127978}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.127978}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.127978}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.127978}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02448749542236328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.212466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957407}, "timestamp": {"timestamp": 1683550865.212466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.212466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.212466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.212466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07543492317199707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.352939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996096}, "timestamp": {"timestamp": 1683550865.352939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.352939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.352939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.352939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04147005081176758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.445252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99963963}, "timestamp": {"timestamp": 1683550865.445252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.445252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.445252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.445252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02701282501220703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.521613}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996654}, "timestamp": {"timestamp": 1683550865.521613}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.521613}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.521613}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.521613}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03569626808166504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.616072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996877}, "timestamp": {"timestamp": 1683550865.616072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.616072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.616072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.616072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03935360908508301 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.722754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970716}, "timestamp": {"timestamp": 1683550865.722754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.722754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.722754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.722754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03163337707519531 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.802128}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995744}, "timestamp": {"timestamp": 1683550865.802128}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.802128}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.802128}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.802128}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03514814376831055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.906074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995981}, "timestamp": {"timestamp": 1683550865.906074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.906074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.906074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.906074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02609539031982422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.974938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961925}, "timestamp": {"timestamp": 1683550865.974938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.974938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.974938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550865.974938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0343785285949707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54431:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54431", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1283.0}, {"feature": 11.0}, {"feature": 3215.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006699332453567406 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011199386423733028 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005432849866338074 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0036165714263916016 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 783 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.096103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99963826}, "timestamp": {"timestamp": 1683550866.096103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.096103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.096103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.096103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024728775024414062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.164186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996555}, "timestamp": {"timestamp": 1683550866.164186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.164186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.164186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.164186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04215502738952637 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.271287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967116}, "timestamp": {"timestamp": 1683550866.271287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.271287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.271287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.271287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026747703552246094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.340205}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968547}, "timestamp": {"timestamp": 1683550866.340205}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.340205}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.340205}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.340205}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03082275390625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.420554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996986}, "timestamp": {"timestamp": 1683550866.420554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.420554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.420554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.420554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03249096870422363 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.505925}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997106}, "timestamp": {"timestamp": 1683550866.505925}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.505925}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.505925}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.505925}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035143136978149414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.583277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99972177}, "timestamp": {"timestamp": 1683550866.583277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.583277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.583277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.583277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030942440032958984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.656642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997321}, "timestamp": {"timestamp": 1683550866.656642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.656642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.656642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.656642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024135351181030273 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.720975}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965584}, "timestamp": {"timestamp": 1683550866.720975}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.720975}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.720975}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.720975}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04296875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.835364}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996677}, "timestamp": {"timestamp": 1683550866.835364}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.835364}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.835364}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550866.835364}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04809069633483887 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54431:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54431', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006697961850607369 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011192307389674085 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005433685146272182 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026471614837646484 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 784 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.017416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996788}, "timestamp": {"timestamp": 1683550867.017416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.017416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.017416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.017416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03312802314758301 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.110204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961174}, "timestamp": {"timestamp": 1683550867.110204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.110204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.110204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.110204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03208422660827637 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.205561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962384}, "timestamp": {"timestamp": 1683550867.205561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.205561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.205561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.205561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03207731246948242 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.285933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996352}, "timestamp": {"timestamp": 1683550867.285933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.285933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.285933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.285933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030662059783935547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.373387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964595}, "timestamp": {"timestamp": 1683550867.373387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.373387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.373387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.373387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03728175163269043 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.452745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996561}, "timestamp": {"timestamp": 1683550867.452745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.452745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.452745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.452745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024927139282226562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.5182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996656}, "timestamp": {"timestamp": 1683550867.5182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.5182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.5182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.5182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04443955421447754 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.608515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996747}, "timestamp": {"timestamp": 1683550867.608515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.608515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.608515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.608515}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032355308532714844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.687594}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968326}, "timestamp": {"timestamp": 1683550867.687594}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.687594}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.687594}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.687594}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03265810012817383 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.764721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969137}, "timestamp": {"timestamp": 1683550867.764721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.764721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.764721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550867.764721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030751466751098633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:07', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2532:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2532", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 16.0}, {"feature": 1483.0}, {"feature": 7.0}, {"feature": 1900.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1492.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12772:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12772", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 20.0}, {"feature": 1273.0}, {"feature": 12.0}, {"feature": 2217.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 3606.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 20.0}, {"feature": 1273.0}, {"feature": 12.0}, {"feature": 2217.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 3606.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006698285058959369 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011185179920752233 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005434520426206291 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0031557083129882812 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 785 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.19585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969906}, "timestamp": {"timestamp": 1683550868.19585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.19585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.19585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.19585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03725910186767578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.281096}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996442}, "timestamp": {"timestamp": 1683550868.281096}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.281096}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.281096}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.281096}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02670884132385254 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.350393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996527}, "timestamp": {"timestamp": 1683550868.350393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.350393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.350393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.350393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02349090576171875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.427941}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996608}, "timestamp": {"timestamp": 1683550868.427941}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.427941}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.427941}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.427941}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04002070426940918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2532:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '2532', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.523176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996685}, "timestamp": {"timestamp": 1683550868.523176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.523176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.523176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.523176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028488874435424805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.613239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967587}, "timestamp": {"timestamp": 1683550868.613239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.613239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.613239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.613239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03478884696960449 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.693677}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996829}, "timestamp": {"timestamp": 1683550868.693677}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.693677}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.693677}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.693677}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03615546226501465 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.806072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968964}, "timestamp": {"timestamp": 1683550868.806072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.806072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.806072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.806072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047551631927490234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12772:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12772', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.94062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969614}, "timestamp": {"timestamp": 1683550868.94062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.94062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.94062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550868.94062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04117774963378906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.03151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970233}, "timestamp": {"timestamp": 1683550869.03151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.03151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.03151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.03151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033048391342163086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 21.0}, {"feature": 1273.0}, {"feature": 13.0}, {"feature": 2240.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 3606.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 21.0}, {"feature": 1273.0}, {"feature": 13.0}, {"feature": 2240.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 3606.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:59372:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "59372", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 23.0}, {"feature": 22.0}, {"feature": 1192.0}, {"feature": 12.0}, {"feature": 2384.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 2672.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:59372:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "59372", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 23.0}, {"feature": 1192.0}, {"feature": 12.0}, {"feature": 2384.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 2672.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.10:57766:94.23.23.52:443", "ip_d": "94.23.23.52", "ip_o": "10.100.200.10", "port_d": "443", "port_o": "57766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 1620.0}, {"feature": 6.0}, {"feature": 1620.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2397.0}, {"feature": 6.0}, {"feature": 2397.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.10:57766:94.23.23.52:443", "ip_d": "94.23.23.52", "ip_o": "10.100.200.10", "port_d": "443", "port_o": "57766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 1620.0}, {"feature": 6.0}, {"feature": 1620.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2305.0}, {"feature": 5.0}, {"feature": 2305.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.10:57766:94.23.23.52:443", "ip_d": "94.23.23.52", "ip_o": "10.100.200.10", "port_d": "443", "port_o": "57766", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 1620.0}, {"feature": 6.0}, {"feature": 1620.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2397.0}, {"feature": 6.0}, {"feature": 2397.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4674:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4674", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006697601884598761 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011178078790163733 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005435225320979953 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002834796905517578 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 786 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.159694}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997083}, "timestamp": {"timestamp": 1683550869.159694}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.159694}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.159694}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.159694}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047518014907836914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.253027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99971396}, "timestamp": {"timestamp": 1683550869.253027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.253027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.253027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.253027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04498767852783203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.347905}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997195}, "timestamp": {"timestamp": 1683550869.347905}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.347905}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.347905}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.347905}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02328658103942871 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:59372:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '59372', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.420567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997248}, "timestamp": {"timestamp": 1683550869.420567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.420567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.420567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.420567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028682947158813477 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:59372:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '59372', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.501363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997299}, "timestamp": {"timestamp": 1683550869.501363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.501363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.501363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550869.501363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03376030921936035 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9899993538856506, 'timestamp': '08/05/2023 13:01:09', 'ip_o': '10.100.200.10', 'ip_d': '94.23.23.52', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.10:57766:94.23.23.52:443', 'protocol': 'TCP', 'port_o': '57766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.989999354 +timestamp: "08/05/2023 13:01:09" +ip_o: "10.100.200.10" +ip_d: "94.23.23.52" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.10:57766:94.23.23.52:443" +protocol: "TCP" +port_o: "57766" +port_d: "443" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" + } +} +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } + } + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } + } + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" + } +} +time_start: 1.68355059e+09 +time_end: 1.68355085e+09 + +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 32 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.8800310270162299 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550870.45938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.98999935}, "timestamp": {"timestamp": 1683550870.45938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550870.45938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550870.45938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550870.45938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030005455017089844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9899993538856506, 'timestamp': '08/05/2023 13:01:09', 'ip_o': '10.100.200.10', 'ip_d': '94.23.23.52', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.10:57766:94.23.23.52:443', 'protocol': 'TCP', 'port_o': '57766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.989999354 +timestamp: "08/05/2023 13:01:09" +ip_o: "10.100.200.10" +ip_d: "94.23.23.52" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.10:57766:94.23.23.52:443" +protocol: "TCP" +port_o: "57766" +port_d: "443" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" + } +} +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } + } + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } + } + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" + } +} +time_start: 1.68355059e+09 +time_end: 1.68355085e+09 + +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 33 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.6197612410178408 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.159473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.98999935}, "timestamp": {"timestamp": 1683550871.159473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.159473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.159473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.159473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024821043014526367 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9999993443489075, 'timestamp': '08/05/2023 13:01:09', 'ip_o': '10.100.200.10', 'ip_d': '94.23.23.52', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.10:57766:94.23.23.52:443', 'protocol': 'TCP', 'port_o': '57766', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.999999344 +timestamp: "08/05/2023 13:01:09" +ip_o: "10.100.200.10" +ip_d: "94.23.23.52" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.10:57766:94.23.23.52:443" +protocol: "TCP" +port_o: "57766" +port_d: "443" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" + } +} +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } + } + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } + } + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" + } +} +time_start: 1.68355059e+09 +time_end: 1.68355085e+09 + +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 34 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.6733630420058034 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.902943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550871.902943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.902943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.902943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.902943}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0363306999206543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.981307}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550871.981307}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.981307}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.981307}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550871.981307}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04016304016113281 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.074072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550872.074072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.074072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.074072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.074072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05062460899353027 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4674:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4674', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2849:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2849", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:48016:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "48016", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006694214651804877 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011171378461152658 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005434520426206291 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025510787963867188 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 787 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.212245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550872.212245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.212245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.212245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.212245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028081417083740234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.289004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550872.289004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.289004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.289004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.289004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.048981428146362305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.395649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550872.395649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.395649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.395649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.395649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04171347618103027 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.495597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550872.495597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.495597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.495597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.495597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033919572830200195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.571316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550872.571316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.571316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.571316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.571316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0730440616607666 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2849:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '2849', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.701411}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550872.701411}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.701411}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.701411}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.701411}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04677772521972656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.800716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550872.800716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.800716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.800716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.800716}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02830052375793457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.874806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550872.874806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.874806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.874806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.874806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037201881408691406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.954672}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550872.954672}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.954672}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.954672}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550872.954672}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024936914443969727 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.021467}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550873.021467}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.021467}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.021467}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.021467}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030828237533569336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:48016:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '48016', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2532:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2532", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 19.0}, {"feature": 17.0}, {"feature": 1483.0}, {"feature": 7.0}, {"feature": 1900.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1492.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2532:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2532", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 21.0}, {"feature": 19.0}, {"feature": 1483.0}, {"feature": 7.0}, {"feature": 1900.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1492.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2532:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2532", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 20.0}, {"feature": 18.0}, {"feature": 1483.0}, {"feature": 7.0}, {"feature": 1900.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1492.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24520:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24520", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 14.0}, {"feature": 13.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1446.0}, {"feature": 6.0}, {"feature": 2306.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1446.0}, {"feature": 5.0}, {"feature": 1876.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1446.0}, {"feature": 6.0}, {"feature": 2306.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1446.0}, {"feature": 6.0}, {"feature": 2306.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006693433046868061 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011164309304918874 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005435225320979953 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0024056434631347656 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 788 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.150891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550873.150891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.150891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.150891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.150891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.044867753982543945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2532:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '2532', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.244793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550873.244793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.244793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.244793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.244793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0380399227142334 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2532:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '2532', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.329154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550873.329154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.329154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.329154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.329154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047438621520996094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2532:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '2532', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.442478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550873.442478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.442478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.442478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.442478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03315567970275879 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.522745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550873.522745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.522745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.522745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.522745}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031061649322509766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.59847}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550873.59847}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.59847}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.59847}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.59847}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.036917924880981445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24520:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '24520', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.685638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550873.685638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.685638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.685638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.685638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040628910064697266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.777035}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550873.777035}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.777035}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.777035}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.777035}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.061219215393066406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.893461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550873.893461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.893461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.893461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550873.893461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05930805206298828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.005452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550874.005452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.005452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.005452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.005452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032537221908569336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 18.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 1968.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 19.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 1968.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 199.0}, {"feature": 7.0}, {"feature": 664.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 199.0}, {"feature": 7.0}, {"feature": 664.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42058:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42058", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 4593.0}, {"feature": 12.0}, {"feature": 18573.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62983:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62983", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 1460.0}, {"feature": 7.0}, {"feature": 2009.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2068.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62983:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62983", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1460.0}, {"feature": 7.0}, {"feature": 2009.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2068.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006696773967847313 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011157626240218957 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005435930215753615 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025892257690429688 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 789 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.11083}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550874.11083}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.11083}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.11083}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.11083}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03316044807434082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.21291}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550874.21291}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.21291}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.21291}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.21291}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05065655708312988 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.312058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550874.312058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.312058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.312058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.312058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04291677474975586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.397573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550874.397573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.397573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.397573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.397573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023651838302612305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.476424}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550874.476424}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.476424}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.476424}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.476424}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031003236770629883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.55231}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550874.55231}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.55231}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.55231}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.55231}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0607147216796875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.66287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550874.66287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.66287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.66287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.66287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05900073051452637 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.80996}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550874.80996}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.80996}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.80996}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550874.80996}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.20404744148254395 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42058:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42058', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.069419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550875.069419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.069419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.069419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.069419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.1100151538848877 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62983:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62983', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.228251}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550875.228251}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.228251}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.228251}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.228251}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05115222930908203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62983:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62983', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57664:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57664", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 16.0}, {"feature": 13.0}, {"feature": 1169.0}, {"feature": 5.0}, {"feature": 1169.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000670389436727649 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001115235580883001 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005437470099423081 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0032694339752197266 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 790 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.376144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550875.376144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.376144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.376144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.376144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03070855140686035 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57664:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57664', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.451115}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550875.451115}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.451115}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.451115}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.451115}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03398728370666504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.527579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550875.527579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.527579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.527579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.527579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029016733169555664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.601138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550875.601138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.601138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.601138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.601138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032820940017700195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.684255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550875.684255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.684255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.684255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.684255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03316903114318848 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.765082}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550875.765082}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.765082}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.765082}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.765082}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03058028221130371 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.840354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550875.840354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.840354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.840354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.840354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040221214294433594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.922587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550875.922587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.922587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.922587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.922587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029221296310424805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.997522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550875.997522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.997522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.997522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550875.997522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02921748161315918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.069286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550876.069286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.069286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.069286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.069286}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03353595733642578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006708987345671759 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001114622329406215 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005439009983092546 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0034971237182617188 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 791 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.176639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550876.176639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.176639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.176639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.176639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03264737129211426 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.255125}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550876.255125}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.255125}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.255125}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.255125}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028896331787109375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.327673}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550876.327673}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.327673}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.327673}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.327673}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04157519340515137 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.415025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550876.415025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.415025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.415025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.415025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.041010379791259766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.531077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550876.531077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.531077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.531077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.531077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028102397918701172 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.614189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550876.614189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.614189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.614189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.614189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029307842254638672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.704832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550876.704832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.704832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.704832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.704832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.049152374267578125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.79753}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550876.79753}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.79753}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.79753}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.79753}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02672576904296875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.867849}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550876.867849}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.867849}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.867849}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.867849}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02823805809020996 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.939721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550876.939721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.939721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.939721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550876.939721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032727718353271484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54431:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54431", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1283.0}, {"feature": 11.0}, {"feature": 3215.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54431:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54431", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1283.0}, {"feature": 11.0}, {"feature": 3215.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42034:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42034", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42046:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42046", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42046:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42046", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006713518724986117 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011139913334798598 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005440280074253678 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0031850337982177734 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 792 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.041256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550877.041256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.041256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.041256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.041256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04653644561767578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.141133}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550877.141133}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.141133}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.141133}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.141133}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03625988960266113 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54431:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54431', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.232412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550877.232412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.232412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.232412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.232412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0341644287109375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54431:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54431', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.329822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550877.329822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.329822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.329822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.329822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03161811828613281 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42034:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42034', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.410887}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550877.410887}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.410887}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.410887}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.410887}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029164791107177734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42046:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42046', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.491914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550877.491914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.491914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.491914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.491914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03336644172668457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42046:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42046', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.569081}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550877.569081}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.569081}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.569081}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.569081}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0409395694732666 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.686088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550877.686088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.686088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.686088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.686088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032274723052978516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.761749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550877.761749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.761749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.761749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.761749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027965545654296875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.838042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550877.838042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.838042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.838042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.838042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027730941772460938 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006718143404867796 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011133647953420602 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000544155016541481 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0037178993225097656 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 793 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.956617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550877.956617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.956617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.956617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550877.956617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02857065200805664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.034261}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550878.034261}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.034261}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.034261}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.034261}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03133440017700195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.131601}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550878.131601}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.131601}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.131601}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.131601}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.061077117919921875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.247413}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550878.247413}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.247413}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.247413}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.247413}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040294647216796875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.357168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550878.357168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.357168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.357168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.357168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0302278995513916 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.434582}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550878.434582}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.434582}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.434582}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.434582}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03278660774230957 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.510738}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550878.510738}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.510738}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.510738}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.510738}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05080056190490723 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.611158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550878.611158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.611158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.611158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.611158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035573482513427734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.703911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550878.703911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.703911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.703911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.703911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027434587478637695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.792135}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550878.792135}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.792135}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.792135}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550878.792135}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03336000442504883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000672697852616684 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011129415945811028 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005442044930532575 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0039520263671875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 794 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.367674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550879.367674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.367674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.367674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.367674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029271364212036133 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:19', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.449992}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550879.449992}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.449992}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.449992}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.449992}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05904078483581543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:19', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.568145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550879.568145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.568145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.568145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.568145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042548179626464844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:19', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.654246}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550879.654246}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.654246}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.654246}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.654246}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027939796447753906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:19', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.724682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550879.724682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.724682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.724682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.724682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026713848114013672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:19', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.809245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550879.809245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.809245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.809245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.809245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.036823272705078125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:19', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.888835}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550879.888835}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.888835}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.888835}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.888835}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024801254272460938 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:19', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.956012}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550879.956012}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.956012}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.956012}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550879.956012}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03588604927062988 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:19', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.05367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550880.05367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.05367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.05367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.05367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030382394790649414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:19', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.137035}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550880.137035}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.137035}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.137035}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.137035}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03125143051147461 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:19', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47298:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47298", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42058:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42058", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 4593.0}, {"feature": 13.0}, {"feature": 19971.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13233:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13233", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 20.0}, {"feature": 1460.0}, {"feature": 10.0}, {"feature": 3280.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 3204.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006741490289012451 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001112992835148122 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005442539695650339 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0045549869537353516 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 795 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.296054}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550880.296054}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.296054}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.296054}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.296054}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.044147491455078125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.413955}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550880.413955}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.413955}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.413955}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.413955}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0335080623626709 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47298:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47298', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.511854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550880.511854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.511854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.511854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.511854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04488658905029297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.601924}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550880.601924}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.601924}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.601924}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.601924}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028920650482177734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.672477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550880.672477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.672477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.672477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.672477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029358386993408203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.744403}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550880.744403}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.744403}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.744403}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.744403}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03464031219482422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.834855}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550880.834855}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.834855}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.834855}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.834855}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.036061763763427734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.933751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550880.933751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.933751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.933751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550880.933751}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028145313262939453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.013615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.013615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.013615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.013615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.013615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04069232940673828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42058:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42058', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.107273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.107273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.107273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.107273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.107273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028752565383911133 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13233:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13233', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13233:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13233", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 20.0}, {"feature": 1460.0}, {"feature": 10.0}, {"feature": 3280.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3227.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 588.0}, {"feature": 9.0}, {"feature": 1442.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 588.0}, {"feature": 8.0}, {"feature": 1053.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1446.0}, {"feature": 6.0}, {"feature": 2306.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006744934145177494 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011123358830947066 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005446014693006873 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0036330223083496094 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 796 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.222691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.222691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.222691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.222691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.222691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02636551856994629 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13233:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13233', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.299434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.299434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.299434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.299434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.299434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025683164596557617 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.386038}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.386038}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.386038}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.386038}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.386038}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027449607849121094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.462291}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.462291}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.462291}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.462291}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.462291}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025815963745117188 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.536042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.536042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.536042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.536042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.536042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035942792892456055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.614483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.614483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.614483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.614483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.614483}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034041643142700195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.696321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.696321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.696321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.696321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.696321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03984498977661133 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.788393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.788393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.788393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.788393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.788393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03084421157836914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.860158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.860158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.860158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.860158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.860158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025289058685302734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.926469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550881.926469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.926469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.926469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550881.926469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032174110412597656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006744034842201222 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001111640732839406 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449489690363407 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0036542415618896484 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 797 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.066539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550882.066539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.066539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.066539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.066539}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035523176193237305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.174441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550882.174441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.174441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.174441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.174441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0529327392578125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.269816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550882.269816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.269816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.269816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.269816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03388261795043945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.361964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550882.361964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.361964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.361964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.361964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03945636749267578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.443686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550882.443686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.443686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.443686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.443686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038451194763183594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.526642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550882.526642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.526642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.526642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.526642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029012203216552734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.608383}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550882.608383}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.608383}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.608383}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.608383}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037915706634521484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.703524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550882.703524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.703524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.703524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.703524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024967193603515625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.789137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550882.789137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.789137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.789137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.789137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025316238403320312 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.856115}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550882.856115}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.856115}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.856115}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.856115}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02917003631591797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006743229109120502 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011109463264700737 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449794989544898 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0029244422912597656 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 798 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.960771}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550882.960771}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.960771}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.960771}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550882.960771}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03772568702697754 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.047985}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.047985}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.047985}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.047985}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.047985}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02318120002746582 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.11378}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.11378}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.11378}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.11378}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.11378}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024349689483642578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.187748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.187748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.187748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.187748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.187748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028906822204589844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.263883}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.263883}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.263883}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.263883}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.263883}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03594541549682617 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.347432}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.347432}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.347432}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.347432}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.347432}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0252685546875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.421332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.421332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.421332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.421332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.421332}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024405241012573242 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.499917}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.499917}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.499917}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.499917}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.499917}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027327537536621094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.585223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.585223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.585223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.585223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.585223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028087615966796875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.66152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.66152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.66152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.66152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.66152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025867462158203125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006740797370513703 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011102721494401064 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449489690363407 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026979446411132812 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 799 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.812147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.812147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.812147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.812147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.812147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02673792839050293 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.891934}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.891934}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.891934}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.891934}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.891934}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02905583381652832 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.97211}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550883.97211}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.97211}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.97211}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550883.97211}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027428388595581055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.051812}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550884.051812}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.051812}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.051812}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.051812}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027489662170410156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.141447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550884.141447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.141447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.141447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.141447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029484272003173828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.216901}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550884.216901}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.216901}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.216901}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.216901}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05122971534729004 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.317561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550884.317561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.317561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.317561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.317561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029364824295043945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.397053}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550884.397053}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.397053}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.397053}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.397053}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023089170455932617 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.467749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550884.467749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.467749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.467749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.467749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025130033493041992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.538204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550884.538204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.538204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.538204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.538204}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029071569442749023 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006738772736571264 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001109592771094178 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005446014693006873 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0035872459411621094 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 800 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.725154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550884.725154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.725154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.725154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.725154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028500080108642578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.79989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550884.79989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.79989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.79989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.79989}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03030848503112793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.885987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550884.885987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.885987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.885987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.885987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032831430435180664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.968521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550884.968521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.968521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.968521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550884.968521}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04535794258117676 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.072188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550885.072188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.072188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.072188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.072188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03543806076049805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.158215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550885.158215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.158215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.158215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.158215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0426332950592041 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.244967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550885.244967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.244967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.244967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.244967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06514358520507812 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.354634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550885.354634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.354634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.354634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.354634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03301405906677246 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.432066}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550885.432066}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.432066}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.432066}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.432066}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029700040817260742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.511111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550885.511111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.511111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.511111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.511111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0289154052734375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24158:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24158", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006736773008087676 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011089143497906848 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005442539695650339 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0033829212188720703 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 801 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.644202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550885.644202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.644202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.644202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.644202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031090497970581055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.731429}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550885.731429}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.731429}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.731429}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.731429}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027085065841674805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24158:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '24158', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.832748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550885.832748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.832748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.832748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.832748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030315160751342773 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.9245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550885.9245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.9245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.9245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550885.9245}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03879094123840332 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.014735}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550886.014735}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.014735}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.014735}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.014735}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028367280960083008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.092098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550886.092098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.092098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.092098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.092098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02785968780517578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.16193}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550886.16193}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.16193}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.16193}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.16193}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03922247886657715 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.254636}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550886.254636}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.254636}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.254636}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.254636}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031661033630371094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.335535}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550886.335535}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.335535}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.335535}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.335535}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030843257904052734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.438097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550886.438097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.438097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.438097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.438097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05121278762817383 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:28012:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "28012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 465.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 727.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54431:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54431", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1283.0}, {"feature": 11.0}, {"feature": 3215.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 22.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 1968.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 23.0}, {"feature": 21.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 1968.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 20.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 1968.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 23.0}, {"feature": 1273.0}, {"feature": 13.0}, {"feature": 2240.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1446.0}, {"feature": 9.0}, {"feature": 3606.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006736286582995411 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011082236461203445 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005446014693006873 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002729177474975586 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 802 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.826037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550886.826037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.826037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.826037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.826037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02475881576538086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.896461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550886.896461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.896461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.896461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.896461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02553701400756836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.986793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550886.986793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.986793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.986793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550886.986793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02638840675354004 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.064088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.064088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.064088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.064088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.064088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02598118782043457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.147808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.147808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.147808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.147808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.147808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03207802772521973 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:28012:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '28012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.23695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.23695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.23695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.23695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.23695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04392409324645996 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54431:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54431', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.344318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.344318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.344318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.344318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.344318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023746967315673828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02637457847595215 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.518264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.518264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.518264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.518264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.518264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02376413345336914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.598923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.598923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.598923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.598923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.598923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02265191078186035 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16153:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16153", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:44428:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "44428", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006732777633662492 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011075779583425004 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005442539695650339 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002351522445678711 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 803 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.711772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.711772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.711772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.711772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.711772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027684688568115234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.788271}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.788271}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.788271}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.788271}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.788271}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026763916015625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.856609}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.856609}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.856609}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.856609}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.856609}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02270340919494629 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.920708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.920708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.920708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.920708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.920708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022777080535888672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16153:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16153', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.998511}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550887.998511}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.998511}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.998511}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550887.998511}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026016950607299805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.066014}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550888.066014}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.066014}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.066014}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.066014}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02624344825744629 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.133557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550888.133557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.133557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.133557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.133557}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032634735107421875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.232822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550888.232822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.232822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.232822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.232822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047469377517700195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.35915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550888.35915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.35915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.35915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.35915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0594329833984375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:44428:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '44428', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.485579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550888.485579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.485579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.485579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.485579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029671430587768555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:28012:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "28012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 465.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:28012:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "28012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 465.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:28012:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "28012", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 199.0}, {"feature": 5.0}, {"feature": 465.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 727.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006733452288760568 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011068906027611582 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005446014693006873 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003875732421875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 804 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.598905}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550888.598905}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.598905}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.598905}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.598905}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03444647789001465 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.685766}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550888.685766}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.685766}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.685766}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.685766}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04586386680603027 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.793585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550888.793585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.793585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.793585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.793585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05274653434753418 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.91908}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550888.91908}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.91908}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.91908}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550888.91908}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03851795196533203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.00866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550889.00866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.00866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.00866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.00866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03570199012756348 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.106486}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550889.106486}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.106486}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.106486}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.106486}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026334285736083984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:28012:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '28012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.188192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550889.188192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.188192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.188192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.188192}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04880404472351074 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:28012:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '28012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.291617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550889.291617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.291617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.291617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.291617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03410029411315918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:28012:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '28012', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.37816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550889.37816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.37816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.37816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.37816}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029166460037231445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.448391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550889.448391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.448391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.448391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.448391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0359957218170166 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61540:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61540", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46281:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46281", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12050:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550300.0}, "features": [{"feature": 29.0}, {"feature": 25.0}, {"feature": 1483.0}, {"feature": 13.0}, {"feature": 3787.0}, {"feature": 26.0}, {"feature": 26.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2769.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006730009813978111 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011062459444148903 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005442539695650339 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020339488983154297 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 805 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.553461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550889.553461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.553461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.553461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.553461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026624202728271484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.624389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550889.624389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.624389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.624389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.624389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03503084182739258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.706273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550889.706273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.706273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.706273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.706273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05145978927612305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.813817}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550889.813817}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.813817}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.813817}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.813817}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025231122970581055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.914489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550889.914489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.914489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.914489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550889.914489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03417038917541504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61540:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61540', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.002581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.002581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.002581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.002581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.002581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026556015014648438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.091495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.091495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.091495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.091495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.091495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030721664428710938 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.174498}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.174498}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.174498}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.174498}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.174498}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039132118225097656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46281:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '46281', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.266189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.266189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.266189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.266189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.266189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0278475284576416 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12050:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550336.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.348695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.348695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.348695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.348695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.348695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03842926025390625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31282:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31282", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 588.0}, {"feature": 9.0}, {"feature": 1442.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:59372:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "59372", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 25.0}, {"feature": 24.0}, {"feature": 1192.0}, {"feature": 12.0}, {"feature": 2384.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 2672.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 5.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006728140918495221 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011055721906576017 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005442044930532575 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003761768341064453 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 806 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.46505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.46505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.46505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.46505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.46505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04040050506591797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.572161}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.572161}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.572161}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.572161}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.572161}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030064105987548828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.646963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.646963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.646963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.646963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.646963}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029044628143310547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.718048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.718048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.718048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.718048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.718048}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03414034843444824 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31282:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31282', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.799267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.799267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.799267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.799267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.799267}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04623842239379883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.903447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.903447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.903447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.903447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.903447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04295182228088379 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:59372:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '59372', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.995781}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550890.995781}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.995781}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.995781}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550890.995781}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024054765701293945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.067473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.067473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.067473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.067473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.067473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026414155960083008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.138919}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.138919}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.138919}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.138919}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.138919}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022849559783935547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.209141}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.209141}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.209141}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.209141}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.209141}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03953886032104492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54431:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54431", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1283.0}, {"feature": 11.0}, {"feature": 3215.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1308.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006726510843545974 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011048966810684316 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000544155016541481 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0029878616333007812 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 807 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.33283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.33283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.33283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.33283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.33283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03480052947998047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54431:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54431', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.413273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.413273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.413273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.413273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.413273}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02270960807800293 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.498026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.498026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.498026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.498026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.498026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042063236236572266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.585461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.585461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.585461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.585461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.585461}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026278018951416016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.656343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.656343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.656343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.656343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.656343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028772592544555664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.732491}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.732491}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.732491}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.732491}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.732491}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03384518623352051 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.812891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.812891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.812891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.812891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.812891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02286505699157715 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.888565}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.888565}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.888565}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.888565}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.888565}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03795170783996582 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.970212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550891.970212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.970212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.970212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550891.970212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031568288803100586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.066403}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550892.066403}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.066403}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.066403}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.066403}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038938045501708984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006724109282886545 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011042338214954067 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005440280074253678 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020215511322021484 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 808 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.180718}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550892.180718}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.180718}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.180718}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.180718}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02983689308166504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.254453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550892.254453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.254453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.254453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.254453}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030059814453125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.327886}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550892.327886}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.327886}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.327886}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.327886}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02691793441772461 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.406469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550892.406469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.406469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.406469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.406469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025740623474121094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.476842}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550892.476842}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.476842}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.476842}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.476842}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04669690132141113 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.573655}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550892.573655}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.573655}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.573655}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.573655}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05467057228088379 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.686341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550892.686341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.686341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.686341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.686341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02858257293701172 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.767785}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550892.767785}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.767785}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.767785}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.767785}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03348541259765625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.845948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550892.845948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.845948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.845948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.845948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0234682559967041 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.915607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550892.915607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.915607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.915607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550892.915607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034372806549072266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 14379.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 15777.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 4593.0}, {"feature": 10.0}, {"feature": 17175.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24158:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24158", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24158:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24158", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42048:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42048", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 4593.0}, {"feature": 15.0}, {"feature": 21768.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42048:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42048", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 4593.0}, {"feature": 15.0}, {"feature": 21768.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57664:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57664", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 16.0}, {"feature": 13.0}, {"feature": 1169.0}, {"feature": 5.0}, {"feature": 1169.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1446.0}, {"feature": 5.0}, {"feature": 1592.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006730786490320874 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011037143520061376 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000544155016541481 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028400421142578125 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 809 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.02496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550893.02496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.02496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.02496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.02496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03839874267578125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.137363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550893.137363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.137363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.137363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.137363}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029647111892700195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.226651}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550893.226651}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.226651}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.226651}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.226651}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025536537170410156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.319902}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550893.319902}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.319902}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.319902}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.319902}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04008150100708008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.40422}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550893.40422}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.40422}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.40422}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.40422}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04395413398742676 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.493468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550893.493468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.493468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.493468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.493468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.053671836853027344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24158:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '24158', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.613412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550893.613412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.613412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.613412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.613412}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026136398315429688 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24158:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '24158', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.684793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550893.684793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.684793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.684793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.684793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02353525161743164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42048:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42048', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.750449}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550893.750449}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.750449}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.750449}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.750449}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03398895263671875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42048:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42048', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.827522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550893.827522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.827522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.827522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.827522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03082108497619629 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57664:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57664', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2706.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 1469.0}, {"feature": 5.0}, {"feature": 1469.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006733183606016093 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001103053908352504 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005442044930532575 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.009227752685546875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 810 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.932952}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550893.932952}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.932952}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.932952}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550893.932952}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02690887451171875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.006182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550894.006182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.006182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.006182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.006182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03360581398010254 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.085019}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550894.085019}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.085019}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.085019}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.085019}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04247641563415527 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.173113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550894.173113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.173113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.173113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.173113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03789210319519043 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.266772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550894.266772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.266772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.266772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.266772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04391646385192871 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.356311}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550894.356311}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.356311}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.356311}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.356311}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029321670532226562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.432017}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550894.432017}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.432017}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.432017}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.432017}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03160214424133301 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.510027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550894.510027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.510027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.510027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.510027}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026573896408081055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.594025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550894.594025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.594025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.594025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.594025}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03589129447937012 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.683576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550894.683576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.683576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.683576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550894.683576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05281972885131836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006740498175653921 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001102570187069709 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005442539695650339 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0031702518463134766 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 811 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.191171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550895.191171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.191171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.191171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.191171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028592824935913086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.271327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550895.271327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.271327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.271327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.271327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05628776550292969 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.370104}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550895.370104}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.370104}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.370104}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.370104}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04575061798095703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.470496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550895.470496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.470496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.470496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.470496}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05958080291748047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.591753}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550895.591753}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.591753}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.591753}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.591753}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03745126724243164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.672323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550895.672323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.672323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.672323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.672323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05276656150817871 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.769889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550895.769889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.769889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.769889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.769889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03126692771911621 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.890637}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550895.890637}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.890637}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.890637}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.890637}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04034590721130371 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.975402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550895.975402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.975402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.975402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550895.975402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03891324996948242 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.077105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550896.077105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.077105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.077105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.077105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03710341453552246 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:35', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14783:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14783", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:11510:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "11510", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 19.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 2014.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2503.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:11510:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "11510", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 19.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 2014.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2480.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:11510:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "11510", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 23.0}, {"feature": 20.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 2014.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2503.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42058:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42058", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 4593.0}, {"feature": 14.0}, {"feature": 21369.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006744573363034155 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011019521686260118 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005446014693006873 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0030422210693359375 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 812 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.200518}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550896.200518}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.200518}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.200518}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.200518}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03132057189941406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.289469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550896.289469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.289469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.289469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.289469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05440187454223633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.397695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550896.397695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.397695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.397695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.397695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04575085639953613 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.492445}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550896.492445}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.492445}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.492445}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.492445}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05995297431945801 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.598971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550896.598971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.598971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.598971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.598971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03587698936462402 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.683891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550896.683891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.683891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.683891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.683891}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039891719818115234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14783:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14783', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.776564}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550896.776564}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.776564}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.776564}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.776564}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026717424392700195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:11510:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '11510', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.849405}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550896.849405}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.849405}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.849405}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.849405}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03321695327758789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:11510:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '11510', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.950862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550896.950862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.950862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.950862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550896.950862}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05834484100341797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:11510:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '11510', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.070851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550897.070851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.070851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.070851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.070851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024710893630981445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42058:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42058', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12050:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550300.0}, "features": [{"feature": 30.0}, {"feature": 26.0}, {"feature": 1483.0}, {"feature": 13.0}, {"feature": 3787.0}, {"feature": 26.0}, {"feature": 26.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2769.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7771:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7771", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 977.0}, {"feature": 7.0}, {"feature": 2144.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7771:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7771", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 977.0}, {"feature": 7.0}, {"feature": 2144.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13233:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13233", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 23.0}, {"feature": 21.0}, {"feature": 1460.0}, {"feature": 10.0}, {"feature": 3280.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3227.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13233:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13233", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 22.0}, {"feature": 1460.0}, {"feature": 10.0}, {"feature": 3280.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3227.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24158:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24158", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24158:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24158", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 588.0}, {"feature": 9.0}, {"feature": 1442.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1401:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1401", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 588.0}, {"feature": 9.0}, {"feature": 1442.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006761640578916188 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011023476100552084 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449489690363407 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0048139095306396484 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 813 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.192747}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550897.192747}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.192747}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.192747}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.192747}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02765679359436035 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12050:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550336.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.282325}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550897.282325}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.282325}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.282325}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.282325}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02666187286376953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7771:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7771', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.350393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550897.350393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.350393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.350393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.350393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02507472038269043 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7771:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7771', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.418505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550897.418505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.418505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.418505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.418505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022973299026489258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13233:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13233', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.491278}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550897.491278}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.491278}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.491278}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.491278}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02205491065979004 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13233:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13233', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.555258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550897.555258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.555258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.555258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.555258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02737259864807129 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24158:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '24158', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.62553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550897.62553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.62553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.62553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.62553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03335690498352051 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24158:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '24158', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.704997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550897.704997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.704997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.704997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.704997}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0409550666809082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.814392}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550897.814392}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.814392}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.814392}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.814392}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03136038780212402 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1401:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1401', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.907828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550897.907828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.907828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.907828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550897.907828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030537843704223633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:37', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 5.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 4593.0}, {"feature": 11.0}, {"feature": 18573.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006774241008615026 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011022559694017432 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449794989544898 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003905773162841797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 814 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.059967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550898.059967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.059967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.059967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.059967}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027482032775878906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.160137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550898.160137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.160137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.160137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.160137}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04812049865722656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.264791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550898.264791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.264791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.264791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.264791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038545846939086914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.351806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550898.351806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.351806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.351806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.351806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02362990379333496 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.416765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550898.416765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.416765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.416765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.416765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02559208869934082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.492698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550898.492698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.492698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.492698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.492698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02531743049621582 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.563479}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550898.563479}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.563479}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.563479}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.563479}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04182791709899902 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.657518}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550898.657518}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.657518}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.657518}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.657518}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040749311447143555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.749691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550898.749691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.749691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.749691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.749691}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.061719655990600586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.853315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550898.853315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.853315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.853315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.853315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021332502365112305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006774829167078472 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011015808092919707 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005450100288726389 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0029447078704833984 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 815 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.948108}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550898.948108}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.948108}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.948108}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550898.948108}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02403998374938965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.030439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550899.030439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.030439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.030439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.030439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024910688400268555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.117749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550899.117749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.117749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.117749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.117749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04360485076904297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.214201}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550899.214201}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.214201}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.214201}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.214201}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.051573991775512695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.322918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550899.322918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.322918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.322918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.322918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033746957778930664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.410508}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550899.410508}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.410508}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.410508}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.410508}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026645660400390625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.51818}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550899.51818}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.51818}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.51818}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.51818}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03616023063659668 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.6031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550899.6031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.6031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.6031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.6031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0229032039642334 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.670878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550899.670878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.670878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.670878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.670878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032337188720703125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.78492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550899.78492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.78492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.78492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.78492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027234554290771484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:38', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006771848114594297 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011009385076411887 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449794989544898 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020682811737060547 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 816 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.878596}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550899.878596}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.878596}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.878596}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.878596}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02248859405517578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.943754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550899.943754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.943754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.943754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550899.943754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02329564094543457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.009786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.009786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.009786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.009786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.009786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0464479923248291 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.099126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.099126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.099126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.099126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.099126}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02056574821472168 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.167536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.167536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.167536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.167536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.167536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03524017333984375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.249465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.249465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.249465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.249465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.249465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.019880294799804688 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.312199}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.312199}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.312199}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.312199}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.312199}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02022552490234375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.388438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.388438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.388438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.388438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.388438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02522587776184082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.457487}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.457487}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.457487}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.457487}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.457487}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02208685874938965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.523292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.523292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.523292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.523292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.523292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026389360427856445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:39', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006768633037260671 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0011003028623237509 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449489690363407 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0022268295288085938 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 817 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.632452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.632452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.632452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.632452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.632452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02809429168701172 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.706203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.706203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.706203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.706203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.706203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021829843521118164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.770722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.770722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.770722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.770722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.770722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033003807067871094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.856351}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.856351}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.856351}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.856351}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.856351}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024734020233154297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.924029}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550900.924029}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.924029}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.924029}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550900.924029}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02887439727783203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.005983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.005983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.005983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.005983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.005983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0380711555480957 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.091536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.091536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.091536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.091536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.091536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04852771759033203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.187516}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.187516}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.187516}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.187516}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.187516}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04445338249206543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.280748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.280748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.280748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.280748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.280748}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05106329917907715 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.377645}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.377645}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.377645}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.377645}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.377645}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021735191345214844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:40', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006766339634775132 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010996496388784361 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005446014693006873 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0021393299102783203 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 818 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.463153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.463153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.463153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.463153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.463153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021836042404174805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.528355}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.528355}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.528355}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.528355}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.528355}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021242618560791016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.602583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.602583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.602583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.602583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.602583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0428767204284668 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.68948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.68948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.68948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.68948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.68948}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03204751014709473 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.765734}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.765734}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.765734}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.765734}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.765734}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039613962173461914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.846976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.846976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.846976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.846976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.846976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02050185203552246 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.909198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.909198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.909198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.909198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.909198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023447513580322266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.985912}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550901.985912}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.985912}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.985912}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550901.985912}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026272058486938477 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.069561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550902.069561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.069561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.069561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.069561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026090383529663086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.153708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550902.153708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.153708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.153708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.153708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04188227653503418 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:41', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56388:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56388", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 14.0}, {"feature": 13.0}, {"feature": 1192.0}, {"feature": 7.0}, {"feature": 1324.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1615.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006766189134228287 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010989781813482739 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449489690363407 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0032625198364257812 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 819 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.43379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550902.43379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.43379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.43379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.43379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031629323959350586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.50986}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550902.50986}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.50986}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.50986}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.50986}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029294729232788086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.587633}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550902.587633}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.587633}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.587633}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.587633}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0403590202331543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.673499}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550902.673499}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.673499}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.673499}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.673499}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03638863563537598 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.755829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550902.755829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.755829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.755829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.755829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03511667251586914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.835169}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550902.835169}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.835169}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.835169}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.835169}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027470827102661133 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.913537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550902.913537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.913537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.913537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550902.913537}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03346443176269531 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.000258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550903.000258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.000258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.000258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.000258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03262805938720703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.086527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550903.086527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.086527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.086527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.086527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04882025718688965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56388:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56388', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.195117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550903.195117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.195117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.195117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.195117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035050392150878906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:42', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63862:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63862", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006763898818640084 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010983274259219883 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005446014693006873 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003343820571899414 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 820 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.309561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550903.309561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.309561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.309561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.309561}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04856109619140625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.417824}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550903.417824}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.417824}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.417824}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.417824}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03470802307128906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.504779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550903.504779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.504779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.504779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.504779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028684616088867188 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.591906}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550903.591906}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.591906}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.591906}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.591906}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03573298454284668 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.689951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550903.689951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.689951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.689951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.689951}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04951310157775879 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.783915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550903.783915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.783915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.783915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.783915}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026450157165527344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63862:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '63862', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.854095}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550903.854095}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.854095}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.854095}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.854095}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027929306030273438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.92576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550903.92576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.92576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.92576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550903.92576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03069162368774414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.003017}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550904.003017}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.003017}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.003017}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.003017}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.13132667541503906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.192218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550904.192218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.192218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.192218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.192218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08082079887390137 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:43', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32443:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32443", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2706.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1492.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 20.0}, {"feature": 19.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2706.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1492.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2706.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1492.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42036:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42036", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000676208895409364 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010976705610649133 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005442539695650339 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.011511802673339844 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 821 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.370327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550904.370327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.370327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.370327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.370327}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03436684608459473 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.463198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550904.463198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.463198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.463198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.463198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03332233428955078 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.574263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550904.574263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.574263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.574263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.574263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07030224800109863 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32443:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '32443', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.740485}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550904.740485}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.740485}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.740485}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.740485}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.09521842002868652 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.893062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550904.893062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.893062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.893062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550904.893062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05716896057128906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.003323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550905.003323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.003323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.003323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.003323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03973054885864258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.094263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550905.094263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.094263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.094263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.094263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.052181243896484375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42036:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42036', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.200536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550905.200536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.200536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.200536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.200536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03533577919006348 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.287409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550905.287409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.287409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.287409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.287409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07628440856933594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.423416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550905.423416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.423416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.423416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.423416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0377805233001709 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:44', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36189:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36189", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 6.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13244:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13244", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 11.0}, {"feature": 7.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56388:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56388", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 1192.0}, {"feature": 7.0}, {"feature": 1324.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1615.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 11.0}, {"feature": 7.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 8.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47292:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47292", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 6.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 146.0}, {"feature": 3.0}, {"feature": 438.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006761192361124023 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010970056831743511 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005446014693006873 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004800558090209961 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 822 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.567676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550905.567676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.567676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.567676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.567676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03510928153991699 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.648725}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550905.648725}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.648725}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.648725}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.648725}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03140759468078613 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36189:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36189', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.755196}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550905.755196}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.755196}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.755196}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.755196}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029024362564086914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.82868}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550905.82868}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.82868}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.82868}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.82868}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02848076820373535 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13244:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13244', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.908151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550905.908151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.908151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.908151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.908151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03573274612426758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56388:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56388', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.997727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550905.997727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.997727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.997727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550905.997727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02459263801574707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.075791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550906.075791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.075791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.075791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.075791}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03985595703125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.167886}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550906.167886}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.167886}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.167886}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.167886}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03367352485656738 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47292:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47292', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.25253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550906.25253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.25253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.25253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.25253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03817296028137207 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.356342}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550906.356342}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.356342}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.356342}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.356342}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04218912124633789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:45', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29147:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29147", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:34541:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "34541", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24158:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24158", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49904:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49904", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 621.0}, {"feature": 3.0}, {"feature": 621.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1451.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49904:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49904", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 621.0}, {"feature": 3.0}, {"feature": 621.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1451.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49904:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49904", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 621.0}, {"feature": 3.0}, {"feature": 621.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006762283159938176 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010963434735112455 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449489690363407 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002757549285888672 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 823 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.501136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550906.501136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.501136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.501136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.501136}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.049877166748046875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29147:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '29147', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.607151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550906.607151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.607151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.607151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.607151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02974104881286621 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.68617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550906.68617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.68617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.68617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.68617}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024573564529418945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.756566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550906.756566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.756566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.756566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.756566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03144979476928711 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.841566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550906.841566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.841566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.841566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.841566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028363704681396484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.921377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550906.921377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.921377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.921377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.921377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026488304138183594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:34541:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '34541', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.990081}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550906.990081}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.990081}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.990081}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550906.990081}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027477025985717773 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24158:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '24158', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.06039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550907.06039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.06039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.06039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.06039}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03770017623901367 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49904:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49904', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.141856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550907.141856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.141856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.141856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.141856}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03503894805908203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49904:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49904', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.221015}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550907.221015}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.221015}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.221015}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.221015}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026844024658203125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49904:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49904', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49904:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49904", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 621.0}, {"feature": 3.0}, {"feature": 621.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57664:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57664", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 17.0}, {"feature": 14.0}, {"feature": 1169.0}, {"feature": 5.0}, {"feature": 1169.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1446.0}, {"feature": 5.0}, {"feature": 1592.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21996:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21996", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 21.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2363.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2073.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21996:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21996", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 23.0}, {"feature": 20.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2363.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 2050.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21996:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21996", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 25.0}, {"feature": 22.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2363.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2073.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21996:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21996", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 21.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2363.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 2050.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:11510:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "11510", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 21.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 2014.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2503.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 23.0}, {"feature": 1273.0}, {"feature": 13.0}, {"feature": 2240.0}, {"feature": 25.0}, {"feature": 25.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 3652.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:65151:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "65151", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 23.0}, {"feature": 1273.0}, {"feature": 13.0}, {"feature": 2240.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3629.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54913:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54913", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2306.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2503.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006762833216677429 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010956791509115324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449794989544898 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028998851776123047 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 824 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.31939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550907.31939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.31939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.31939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.31939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029140710830688477 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49904:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49904', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.412252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550907.412252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.412252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.412252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.412252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029504776000976562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57664:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57664', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.526297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550907.526297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.526297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.526297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.526297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027120351791381836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21996:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '21996', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.627641}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550907.627641}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.627641}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.627641}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.627641}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03251838684082031 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21996:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '21996', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.70876}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550907.70876}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.70876}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.70876}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.70876}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04219532012939453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21996:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '21996', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.798987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550907.798987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.798987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.798987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.798987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04256319999694824 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21996:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '21996', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.887444}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550907.887444}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.887444}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.887444}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.887444}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.036327362060546875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:11510:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '11510', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.967163}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550907.967163}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.967163}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.967163}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550907.967163}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029293537139892578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.040333}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550908.040333}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.040333}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.040333}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.040333}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02743077278137207 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:65151:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '65151', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.114254}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550908.114254}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.114254}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.114254}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.114254}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03396177291870117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54913:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54913', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54913:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54913", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2306.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2503.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54913:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54913", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2306.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2480.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:54913:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "54913", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 20.0}, {"feature": 19.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2306.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2503.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 17.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 2334.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 17.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2357.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 23.0}, {"feature": 19.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2357.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 18.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2357.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42054:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42054", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42054:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42054", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42054:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42054", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006760705309694238 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010950319380419852 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449489690363407 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0027806758880615234 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 825 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.225822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550908.225822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.225822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.225822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.225822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03482770919799805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54913:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54913', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.326004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550908.326004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.326004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.326004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.326004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03433966636657715 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54913:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54913', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.411475}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550908.411475}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.411475}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.411475}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.411475}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027663707733154297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:54913:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '54913', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.497061}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550908.497061}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.497061}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.497061}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.497061}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03975486755371094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.602001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550908.602001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.602001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.602001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.602001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032492637634277344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.679746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550908.679746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.679746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.679746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.679746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0352783203125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.797402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550908.797402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.797402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.797402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.797402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02695322036743164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.887319}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550908.887319}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.887319}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.887319}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.887319}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0296628475189209 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42054:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42054', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.966051}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550908.966051}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.966051}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.966051}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550908.966051}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026280879974365234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42054:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42054', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.037042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.037042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.037042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.037042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.037042}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024870634078979492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42054:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42054', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31119:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31119", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 524.0}, {"feature": 6.0}, {"feature": 1306.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1451.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31119:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31119", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 524.0}, {"feature": 6.0}, {"feature": 1306.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 4593.0}, {"feature": 12.0}, {"feature": 19971.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006759399831459629 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001094375308928298 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005449794989544898 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002212047576904297 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 826 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.138104}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.138104}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.138104}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.138104}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.138104}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027420520782470703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31119:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '31119', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.208781}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.208781}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.208781}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.208781}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.208781}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026171207427978516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31119:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '31119', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.291869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.291869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.291869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.291869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.291869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035527706146240234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.375571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.375571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.375571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.375571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.375571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02398371696472168 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.447037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.447037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.447037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.447037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.447037}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03102850914001465 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.531738}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.531738}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.531738}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.531738}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.531738}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03171086311340332 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.613175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.613175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.613175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.613175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.613175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034850120544433594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.69714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.69714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.69714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.69714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.69714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02570819854736328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.776841}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.776841}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.776841}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.776841}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.776841}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031352996826171875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.858028}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.858028}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.858028}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.858028}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.858028}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033895015716552734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006760643531755288 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010937192958973504 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005450100288726389 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003643512725830078 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 827 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.962758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550909.962758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.962758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.962758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550909.962758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02834010124206543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.038298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550910.038298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.038298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.038298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.038298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025567293167114258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.138877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550910.138877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.138877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.138877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.138877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03807187080383301 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.228545}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550910.228545}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.228545}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.228545}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.228545}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02433466911315918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.307492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550910.307492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.307492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.307492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.307492}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027982711791992188 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.386214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550910.386214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.386214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.386214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.386214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.08877730369567871 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.548463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550910.548463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.548463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.548463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.548463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022952556610107422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.630833}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550910.630833}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.630833}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.630833}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.630833}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026464223861694336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.703892}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550910.703892}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.703892}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.703892}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.703892}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03034830093383789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.81945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550910.81945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.81945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.81945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550910.81945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04643821716308594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1398.0}, {"feature": 1.0}, {"feature": 1398.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 4593.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 4593.0}, {"feature": 4.0}, {"feature": 5991.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 2796.0}, {"feature": 2.0}, {"feature": 2796.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 4593.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29344:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29344", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 15.0}, {"feature": 13.0}, {"feature": 1158.0}, {"feature": 6.0}, {"feature": 1853.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1645.0}, {"feature": 5.0}, {"feature": 1712.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006764604409021698 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010931179854337064 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005450125026982278 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0047490596771240234 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 828 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.237871}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550911.237871}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.237871}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.237871}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.237871}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026993751525878906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.331669}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550911.331669}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.331669}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.331669}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.331669}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02582097053527832 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.414795}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550911.414795}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.414795}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.414795}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.414795}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03343653678894043 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.498466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550911.498466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.498466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.498466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.498466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035359859466552734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.587541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550911.587541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.587541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.587541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.587541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028496503829956055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.664459}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550911.664459}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.664459}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.664459}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.664459}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.045220375061035156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.757187}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550911.757187}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.757187}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.757187}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.757187}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024961471557617188 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.826268}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550911.826268}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.826268}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.826268}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.826268}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025815963745117188 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.908045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550911.908045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.908045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.908045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550911.908045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031838417053222656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.007472}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550912.007472}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.007472}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.007472}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.007472}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04465436935424805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29344:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29344', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 4593.0}, {"feature": 5.0}, {"feature": 7389.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 4593.0}, {"feature": 6.0}, {"feature": 8787.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 10185.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49904:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49904", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 621.0}, {"feature": 3.0}, {"feature": 621.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1451.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49904:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49904", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550700.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 621.0}, {"feature": 3.0}, {"feature": 621.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 581.0}, {"feature": 4.0}, {"feature": 1451.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 17.0}, {"feature": 15.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2016.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 6.0}, {"feature": 2311.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 16.0}, {"feature": 14.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2016.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 6.0}, {"feature": 2311.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 16.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2016.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 6.0}, {"feature": 2311.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 16.0}, {"feature": 14.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2016.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1446.0}, {"feature": 5.0}, {"feature": 1881.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006775097202917446 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010928756397691607 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005450149765238166 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0036690235137939453 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 829 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.167715}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550912.167715}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.167715}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.167715}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.167715}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03352212905883789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.253811}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550912.253811}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.253811}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.253811}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.253811}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03753471374511719 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.345026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550912.345026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.345026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.345026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.345026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02613377571105957 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.421656}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550912.421656}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.421656}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.421656}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.421656}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04264330863952637 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49904:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49904', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.537434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550912.537434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.537434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.537434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.537434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030383825302124023 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49904:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49904', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.626808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550912.626808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.626808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.626808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.626808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04656529426574707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.735954}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550912.735954}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.735954}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.735954}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.735954}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05865836143493652 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.867433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550912.867433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.867433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.867433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.867433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02420663833618164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.934203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550912.934203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.934203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.934203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550912.934203}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027520418167114258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.008439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.008439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.008439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.008439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.008439}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03589320182800293 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57664:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57664", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 15.0}, {"feature": 1169.0}, {"feature": 5.0}, {"feature": 1169.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1615.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57664:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57664", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 17.0}, {"feature": 14.0}, {"feature": 1169.0}, {"feature": 5.0}, {"feature": 1169.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1615.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31119:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31119", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 524.0}, {"feature": 6.0}, {"feature": 1306.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1886.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31119:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31119", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 524.0}, {"feature": 6.0}, {"feature": 1306.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1451.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 20.0}, {"feature": 19.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2706.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1492.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15184:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15184", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550600.0}, "features": [{"feature": 21.0}, {"feature": 20.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2706.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1492.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006784773856704404 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010925723826410295 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005450845055747777 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0032253265380859375 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 830 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.115284}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.115284}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.115284}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.115284}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.115284}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029198169708251953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.189819}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.189819}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.189819}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.189819}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.189819}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02814936637878418 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.262154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.262154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.262154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.262154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.262154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033322811126708984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.348808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.348808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.348808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.348808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.348808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024982690811157227 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57664:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57664', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.426814}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.426814}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.426814}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.426814}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.426814}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027323484420776367 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57664:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57664', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.512536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.512536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.512536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.512536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.512536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04992055892944336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31119:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '31119', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.613796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.613796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.613796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.613796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.613796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04537463188171387 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31119:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '31119', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.709554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.709554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.709554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.709554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.709554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029595613479614258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.801306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.801306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.801306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.801306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.801306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03839731216430664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15184:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15184', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.886476}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.886476}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.886476}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.886476}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.886476}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03167986869812012 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15989:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15989", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006788570157736406 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010919695740525767 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005451540346257389 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003247499465942383 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 831 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.985729}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550913.985729}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.985729}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.985729}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550913.985729}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037012577056884766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.075194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550914.075194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.075194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.075194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.075194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03714919090270996 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.174158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550914.174158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.174158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.174158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.174158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024540424346923828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.24936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550914.24936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.24936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.24936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.24936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04479694366455078 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.350582}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550914.350582}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.350582}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.350582}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.350582}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03187823295593262 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.432438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550914.432438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.432438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.432438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.432438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047179222106933594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15989:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '15989', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.5253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550914.5253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.5253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.5253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.5253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02377629280090332 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.603662}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550914.603662}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.603662}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.603662}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.603662}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023177146911621094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.671846}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550914.671846}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.671846}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.671846}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.671846}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.036305904388427734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.752913}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550914.752913}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.752913}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.752913}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.752913}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.059537410736083984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006792866924325398 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010913834346514037 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005455670179799199 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028221607208251953 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 832 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.90562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550914.90562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.90562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.90562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.90562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02771925926208496 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.996246}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550914.996246}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.996246}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.996246}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550914.996246}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030917882919311523 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.114118}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550915.114118}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.114118}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.114118}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.114118}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05814075469970703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.227999}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550915.227999}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.227999}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.227999}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.227999}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07249832153320312 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.361625}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550915.361625}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.361625}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.361625}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.361625}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.059938669204711914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.477299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550915.477299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.477299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.477299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.477299}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024499177932739258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.548575}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550915.548575}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.548575}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.548575}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.548575}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027279376983642578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.636224}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550915.636224}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.636224}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.636224}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.636224}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026361465454101562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.723634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550915.723634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.723634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.723634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.723634}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023805856704711914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.806134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550915.806134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.806134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.806134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.806134}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031035423278808594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 23.0}, {"feature": 19.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2380.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 2329.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49860:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49860", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 29.0}, {"feature": 25.0}, {"feature": 1250.0}, {"feature": 15.0}, {"feature": 3250.0}, {"feature": 26.0}, {"feature": 26.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49860:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49860", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 29.0}, {"feature": 25.0}, {"feature": 1250.0}, {"feature": 15.0}, {"feature": 3250.0}, {"feature": 25.0}, {"feature": 25.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49860:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49860", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 28.0}, {"feature": 24.0}, {"feature": 1250.0}, {"feature": 15.0}, {"feature": 3250.0}, {"feature": 25.0}, {"feature": 25.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006797932102210766 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001090825992653811 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000545980001334101 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026683807373046875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 833 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.938506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550915.938506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.938506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.938506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550915.938506}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02585625648498535 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.041472}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.041472}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.041472}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.041472}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.041472}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027611255645751953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.124057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.124057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.124057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.124057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.124057}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034459829330444336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.212237}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.212237}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.212237}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.212237}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.212237}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03136277198791504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.287504}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.287504}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.287504}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.287504}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.287504}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02463555335998535 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.355639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.355639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.355639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.355639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.355639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0303955078125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49860:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49860', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.430326}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.430326}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.430326}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.430326}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.430326}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035639286041259766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49860:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49860', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.511055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.511055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.511055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.511055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.511055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0283200740814209 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49860:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49860', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.589658}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.589658}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.589658}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.589658}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.589658}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0270998477935791 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.661202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.661202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.661202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.661202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.661202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025420188903808594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006799231523735007 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010901782749624081 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005460155080072582 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0034492015838623047 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 834 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.778225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.778225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.778225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.778225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.778225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02544999122619629 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.857143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.857143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.857143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.857143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.857143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029694557189941406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:01:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.931522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550916.931522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.931522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.931522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550916.931522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029024839401245117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.008578}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.008578}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.008578}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.008578}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.008578}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028191089630126953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.08743}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.08743}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.08743}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.08743}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.08743}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02761363983154297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.159893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.159893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.159893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.159893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.159893}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022093772888183594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.226154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.226154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.226154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.226154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.226154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02725815773010254 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.306872}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.306872}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.306872}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.306872}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.306872}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026505708694458008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.384739}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.384739}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.384739}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.384739}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.384739}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02630138397216797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.455215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.455215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.455215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.455215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.455215}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02669072151184082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550500.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1267.0}, {"feature": 10.0}, {"feature": 2340.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2485.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006798402719969253 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010895279071005078 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005460510146804154 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026175975799560547 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 835 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.552256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.552256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.552256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.552256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.552256}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025750398635864258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.629605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.629605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.629605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.629605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.629605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021757125854492188 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.716938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.716938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.716938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.716938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.716938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0314786434173584 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.793524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.793524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.793524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.793524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.793524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02402639389038086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.871813}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.871813}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.871813}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.871813}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.871813}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022348880767822266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.946522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550917.946522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.946522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.946522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550917.946522}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028110742568969727 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.022087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550918.022087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.022087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.022087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.022087}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025719642639160156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.101501}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550918.101501}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.101501}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.101501}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.101501}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.045986175537109375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.194384}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550918.194384}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.194384}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.194384}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.194384}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04336428642272949 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:01:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.299859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550918.299859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.299859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.299859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.299859}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04359078407287598 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006795578949408534 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010889066530793915 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005460155080072582 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0023343563079833984 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 836 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.41344}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550918.41344}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.41344}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.41344}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.41344}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027045011520385742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.494416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550918.494416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.494416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.494416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.494416}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026797056198120117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.570292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550918.570292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.570292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.570292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.570292}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030109167098999023 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.667686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550918.667686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.667686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.667686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.667686}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04489302635192871 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.78742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550918.78742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.78742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.78742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.78742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03478884696960449 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:01:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.899438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550918.899438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.899438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.899438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550918.899438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.054110050201416016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.02318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550919.02318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.02318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.02318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.02318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04242396354675293 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.11669}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550919.11669}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.11669}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.11669}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.11669}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02471637725830078 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.190605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550919.190605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.190605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.190605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.190605}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038602590560913086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.274171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550919.274171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.274171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.274171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550919.274171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02646636962890625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:01:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683550800.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006795628257807937 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010882559861406555 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005460510146804154 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0034880638122558594 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 837 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.570375}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550920.570375}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.570375}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.570375}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.570375}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03605222702026367 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.668026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550920.668026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.668026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.668026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.668026}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025114059448242188 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:02:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.735563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550920.735563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.735563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.735563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.735563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03400015830993652 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.822602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550920.822602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.822602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.822602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.822602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04297494888305664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.93272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550920.93272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.93272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.93272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550920.93272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03491067886352539 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550848.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.020341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.020341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.020341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.020341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.020341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038484811782836914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.105728}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.105728}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.105728}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.105728}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.105728}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0399928092956543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.191977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.191977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.191977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.191977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.191977}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027919769287109375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.266782}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.266782}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.266782}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.266782}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.266782}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021162748336791992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.334209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.334209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.334209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.334209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.334209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02100992202758789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:00', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006793963832353955 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010876171347296059 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005460155080072582 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002470731735229492 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 838 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.438129}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.438129}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.438129}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.438129}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.438129}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03175067901611328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.520707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.520707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.520707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.520707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.520707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04565787315368652 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.618654}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.618654}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.618654}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.618654}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.618654}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04073953628540039 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:02:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.702665}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.702665}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.702665}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.702665}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.702665}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.056421756744384766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.805507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.805507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.805507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.805507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.805507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02858114242553711 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.87872}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.87872}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.87872}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.87872}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.87872}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04176664352416992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.979881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550921.979881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.979881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.979881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550921.979881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04506683349609375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.100385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550922.100385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.100385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.100385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.100385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06677389144897461 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.223649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550922.223649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.223649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.223649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.223649}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02653217315673828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.303419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550922.303419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.303419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.303419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.303419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04190683364868164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:01', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23214:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23214", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:26994:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "26994", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006791202981259199 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010869981604137938 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000545980001334101 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003083467483520508 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 839 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.421877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550922.421877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.421877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.421877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.421877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04052925109863281 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.530495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550922.530495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.530495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.530495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.530495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038110971450805664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23214:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23214', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.620113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550922.620113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.620113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.620113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.620113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04804515838623047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.731034}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550922.731034}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.731034}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.731034}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.731034}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03787660598754883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.834821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550922.834821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.834821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.834821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.834821}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026205778121948242 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.910508}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550922.910508}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.910508}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.910508}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.910508}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02813887596130371 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.990456}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550922.990456}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.990456}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.990456}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550922.990456}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034972429275512695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.070261}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550923.070261}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.070261}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.070261}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.070261}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05529308319091797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.175902}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550923.175902}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.175902}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.175902}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.175902}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03370976448059082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.254451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550923.254451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.254451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.254451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.254451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029760360717773438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:02', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:26994:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '26994', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14009:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14009", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2352.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006787973965401761 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010863912069053563 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005455670179799199 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020623207092285156 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 840 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.372836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550923.372836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.372836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.372836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.372836}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04507136344909668 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.467295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550923.467295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.467295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.467295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.467295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031071186065673828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.553894}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550923.553894}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.553894}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.553894}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.553894}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028549671173095703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.638946}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550923.638946}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.638946}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.638946}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.638946}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037461042404174805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.72123}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550923.72123}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.72123}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.72123}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.72123}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037566423416137695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.80914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550923.80914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.80914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.80914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.80914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04405522346496582 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.899173}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550923.899173}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.899173}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.899173}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.899173}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035764455795288086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.979555}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550923.979555}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.979555}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.979555}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550923.979555}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03920412063598633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550924.077274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550924.077274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550924.077274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550924.077274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550924.077274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03235626220703125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14009:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14009', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550924.153933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9933327}, "timestamp": {"timestamp": 1683550924.153933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550924.153933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550924.153933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550924.153933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030687332153320312 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:03', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2352.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2352.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7134:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7134", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45404:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45404", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 20.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2380.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42042:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42042", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 25563.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006789468693509299 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010857537648700727 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000545980001334101 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0034372806549072266 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 841 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:No KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0001575946807861328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.396587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550924.396587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.396587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.396587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.396587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03318023681640625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.480799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550924.480799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.480799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.480799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.480799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027716636657714844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7134:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7134', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.556198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550924.556198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.556198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.556198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.556198}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.045690298080444336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.64717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550924.64717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.64717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.64717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.64717}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03438854217529297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.728602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550924.728602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.728602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.728602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.728602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032434701919555664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.837216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550924.837216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.837216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.837216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.837216}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03350996971130371 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.923879}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550924.923879}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.923879}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.923879}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550924.923879}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03442955017089844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45404:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45404', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.020172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550925.020172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.020172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.020172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.020172}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027420759201049805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.107911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550925.107911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.107911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.107911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.107911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04320979118347168 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:04', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42042:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42042', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42042:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42042", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:52964:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "52964", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 19.0}, {"feature": 18.0}, {"feature": 1267.0}, {"feature": 10.0}, {"feature": 2340.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2508.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49860:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49860", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 31.0}, {"feature": 27.0}, {"feature": 1250.0}, {"feature": 15.0}, {"feature": 3250.0}, {"feature": 26.0}, {"feature": 26.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:49860:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "49860", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 30.0}, {"feature": 26.0}, {"feature": 1250.0}, {"feature": 15.0}, {"feature": 3250.0}, {"feature": 26.0}, {"feature": 26.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60566:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60566:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60566:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000679167978727699 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010851277718081024 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005460155080072582 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003417491912841797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 842 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.24229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550925.24229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.24229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.24229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.24229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04532337188720703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42042:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42042', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.342205}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550925.342205}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.342205}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.342205}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.342205}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03878021240234375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.446206}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550925.446206}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.446206}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.446206}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.446206}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.045218467712402344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.552394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550925.552394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.552394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.552394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.552394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03909015655517578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:52964:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '52964', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.645723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550925.645723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.645723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.645723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.645723}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0372622013092041 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.733409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550925.733409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.733409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.733409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.733409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026021480560302734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49860:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49860', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.827171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550925.827171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.827171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.827171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.827171}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032076358795166016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:49860:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '49860', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.929777}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550925.929777}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.929777}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.929777}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550925.929777}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025079727172851562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60566:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.019045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550926.019045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.019045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.019045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.019045}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02539992332458496 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60566:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.112202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550926.112202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.112202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.112202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.112202}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03443312644958496 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:05', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60566:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60566:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60566:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13233:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13233", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 25.0}, {"feature": 23.0}, {"feature": 1460.0}, {"feature": 10.0}, {"feature": 3280.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3227.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13233:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13233", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 22.0}, {"feature": 1460.0}, {"feature": 10.0}, {"feature": 3280.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3227.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.15:59218:91.121.140.167:443", "ip_d": "91.121.140.167", "ip_o": "10.100.200.15", "port_d": "443", "port_o": "59218", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 1227.0}, {"feature": 5.0}, {"feature": 1227.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2313.0}, {"feature": 5.0}, {"feature": 2313.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.15:59218:91.121.140.167:443", "ip_d": "91.121.140.167", "ip_o": "10.100.200.15", "port_d": "443", "port_o": "59218", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1227.0}, {"feature": 5.0}, {"feature": 1227.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2313.0}, {"feature": 5.0}, {"feature": 2313.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.15:59218:91.121.140.167:443", "ip_d": "91.121.140.167", "ip_o": "10.100.200.15", "port_d": "443", "port_o": "59218", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1227.0}, {"feature": 5.0}, {"feature": 1227.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 2213.0}, {"feature": 4.0}, {"feature": 2213.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 4593.0}, {"feature": 13.0}, {"feature": 21369.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42056:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42056", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31119:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31119", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 14.0}, {"feature": 12.0}, {"feature": 524.0}, {"feature": 6.0}, {"feature": 1306.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1886.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000680579602746525 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010852572597528135 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005460510146804154 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0036973953247070312 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 843 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.23628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 1.0}, "timestamp": {"timestamp": 1683550926.23628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.23628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.23628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.23628}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024368762969970703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60566:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.309611}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9998983}, "timestamp": {"timestamp": 1683550926.309611}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.309611}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.309611}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.309611}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02452373504638672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60566:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.384926}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99990296}, "timestamp": {"timestamp": 1683550926.384926}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.384926}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.384926}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.384926}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025862455368041992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13233:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13233', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.466569}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99990714}, "timestamp": {"timestamp": 1683550926.466569}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.466569}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.466569}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.466569}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027012109756469727 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13233:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13233', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.537722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999911}, "timestamp": {"timestamp": 1683550926.537722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.537722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.537722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683550926.537722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028171539306640625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9999993443489075, 'timestamp': '08/05/2023 13:02:06', 'ip_o': '10.100.200.15', 'ip_d': '91.121.140.167', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.15:59218:91.121.140.167:443', 'protocol': 'TCP', 'port_o': '59218', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.999999344 +timestamp: "08/05/2023 13:02:06" +ip_o: "10.100.200.15" +ip_d: "91.121.140.167" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.15:59218:91.121.140.167:443" +protocol: "TCP" +port_o: "59218" +port_d: "443" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" + } +} +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } + } + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } + } + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" + } +} +time_start: 1.68355059e+09 +time_end: 1.68355098e+09 + +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 35 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.6842516050091945 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550927.294147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550927.294147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550927.294147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550927.294147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550927.294147}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03752779960632324 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9999993443489075, 'timestamp': '08/05/2023 13:02:06', 'ip_o': '10.100.200.15', 'ip_d': '91.121.140.167', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.15:59218:91.121.140.167:443', 'protocol': 'TCP', 'port_o': '59218', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.999999344 +timestamp: "08/05/2023 13:02:06" +ip_o: "10.100.200.15" +ip_d: "91.121.140.167" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.15:59218:91.121.140.167:443" +protocol: "TCP" +port_o: "59218" +port_d: "443" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" + } +} +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } + } + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } + } + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" + } +} +time_start: 1.68355059e+09 +time_end: 1.68355098e+09 + +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 36 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.5006814820226282 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550927.891746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550927.891746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550927.891746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550927.891746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550927.891746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03133082389831543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9999993443489075, 'timestamp': '08/05/2023 13:02:06', 'ip_o': '10.100.200.15', 'ip_d': '91.121.140.167', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.15:59218:91.121.140.167:443', 'protocol': 'TCP', 'port_o': '59218', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.999999344 +timestamp: "08/05/2023 13:02:06" +ip_o: "10.100.200.15" +ip_d: "91.121.140.167" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.15:59218:91.121.140.167:443" +protocol: "TCP" +port_o: "59218" +port_d: "443" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" + } +} +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } + } + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } + } + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" + } +} +time_start: 1.68355059e+09 +time_end: 1.68355098e+09 + +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 37 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.5491672999924049 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.516469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550928.516469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.516469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.516469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.516469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02338433265686035 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.597676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550928.597676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.597676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.597676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.597676}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02586960792541504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42056:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42056', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.681983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550928.681983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.681983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.681983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.681983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035997867584228516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:06', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31119:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '31119', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 11583.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006818800806829273 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001085271191782329 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005467075097840279 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003778696060180664 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 844 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.812274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550928.812274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.812274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.812274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.812274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025565385818481445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.90666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550928.90666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.90666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.90666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550928.90666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038491249084472656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.001283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550929.001283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.001283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.001283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.001283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03458523750305176 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.093369}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550929.093369}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.093369}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.093369}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.093369}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03613758087158203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.207881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550929.207881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.207881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.207881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.207881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02858138084411621 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.304695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550929.304695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.304695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.304695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.304695}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04799151420593262 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.411357}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550929.411357}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.411357}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.411357}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.411357}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027248859405517578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.488851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550929.488851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.488851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.488851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.488851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024805068969726562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.568345}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550929.568345}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.568345}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.568345}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.568345}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042449951171875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.66112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550929.66112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.66112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.66112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.66112}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026077985763549805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:08', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:30795:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "30795", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6625:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6625", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 146.0}, {"feature": 1.0}, {"feature": 146.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006828939090290013 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010850286637468659 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005473640048876405 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.01785755157470703 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 845 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.786822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550929.786822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.786822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.786822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.786822}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05199480056762695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.891888}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550929.891888}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.891888}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.891888}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.891888}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02959275245666504 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.97904}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550929.97904}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.97904}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.97904}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550929.97904}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05634164810180664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.084736}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550930.084736}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.084736}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.084736}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.084736}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02887701988220215 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.168481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550930.168481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.168481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.168481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.168481}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.043469905853271484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:02:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.256576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550930.256576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.256576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.256576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.256576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04087567329406738 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.344186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550930.344186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.344186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.344186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.344186}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.11081123352050781 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.522016}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550930.522016}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.522016}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.522016}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.522016}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040883541107177734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.638796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550930.638796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.638796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.638796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.638796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02833724021911621 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:30795:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '30795', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.719606}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550930.719606}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.719606}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.719606}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550930.719606}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04056596755981445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:09', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6625:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '6625', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:29344:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "29344", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 16.0}, {"feature": 14.0}, {"feature": 1158.0}, {"feature": 6.0}, {"feature": 1853.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1645.0}, {"feature": 5.0}, {"feature": 1712.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42058:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42058", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 4593.0}, {"feature": 15.0}, {"feature": 22767.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36586:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36586", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37413:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37413", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37413:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37413", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.000683648059247546 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001084608775629494 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000547441013623029 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004210710525512695 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 846 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.251476}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550931.251476}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.251476}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.251476}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.251476}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03484988212585449 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:29344:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '29344', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.342662}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550931.342662}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.342662}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.342662}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.342662}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02784562110900879 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42058:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42058', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.444987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550931.444987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.444987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.444987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.444987}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03392314910888672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.536735}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550931.536735}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.536735}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.536735}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.536735}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0243685245513916 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.636962}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550931.636962}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.636962}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.636962}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.636962}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02980351448059082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.724585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550931.724585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.724585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.724585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.724585}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02896904945373535 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.815471}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550931.815471}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.815471}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.815471}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.815471}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02975773811340332 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.901182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550931.901182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.901182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.901182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.901182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028649568557739258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36586:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '36586', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.989097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550931.989097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.989097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.989097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550931.989097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05485677719116211 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37413:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37413', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.093666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550932.093666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.093666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.093666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.093666}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06783032417297363 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:11', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37413:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37413', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37413:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37413", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37413:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37413", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37413:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37413", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37413:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37413", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:59372:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "59372", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 26.0}, {"feature": 25.0}, {"feature": 1192.0}, {"feature": 12.0}, {"feature": 2384.0}, {"feature": 25.0}, {"feature": 25.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 2672.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:59372:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "59372", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 25.0}, {"feature": 24.0}, {"feature": 1192.0}, {"feature": 12.0}, {"feature": 2384.0}, {"feature": 25.0}, {"feature": 25.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 2672.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31119:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31119", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 15.0}, {"feature": 13.0}, {"feature": 524.0}, {"feature": 6.0}, {"feature": 1306.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1886.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6625:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6625", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6625:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6625", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6625:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6625", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 132.0}, {"feature": 1.0}, {"feature": 132.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 146.0}, {"feature": 2.0}, {"feature": 292.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006836823519971332 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010839687805277976 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005475180223584175 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0028297901153564453 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 847 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.247068}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550932.247068}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.247068}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.247068}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.247068}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.047191619873046875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37413:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37413', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.345808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550932.345808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.345808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.345808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.345808}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030997514724731445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37413:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37413', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.426583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550932.426583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.426583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.426583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.426583}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03121209144592285 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37413:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37413', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.51478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550932.51478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.51478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.51478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.51478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030585050582885742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37413:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37413', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.611541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550932.611541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.611541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.611541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.611541}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038236379623413086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:59372:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '59372', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.695553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550932.695553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.695553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.695553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.695553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04605889320373535 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:59372:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '59372', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.785408}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550932.785408}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.785408}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.785408}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.785408}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03381681442260742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31119:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '31119', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.871052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550932.871052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.871052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.871052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.871052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0385894775390625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6625:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '6625', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.960109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550932.960109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.960109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.960109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550932.960109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05228447914123535 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6625:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '6625', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.05982}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550933.05982}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.05982}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.05982}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.05982}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028650522232055664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:12', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6625:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '6625', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 20.0}, {"feature": 1267.0}, {"feature": 10.0}, {"feature": 2340.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2508.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 20.0}, {"feature": 1267.0}, {"feature": 10.0}, {"feature": 2340.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2508.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 21.0}, {"feature": 1267.0}, {"feature": 10.0}, {"feature": 2340.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2508.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 19.0}, {"feature": 1267.0}, {"feature": 10.0}, {"feature": 2340.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2508.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 20.0}, {"feature": 1267.0}, {"feature": 10.0}, {"feature": 2340.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2508.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1077:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1077", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1077:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1077", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1077:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1077", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1077:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1077", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 19.0}, {"feature": 17.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2016.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2357.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006834256994995983 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010833552095437643 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000547441013623029 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020928382873535156 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 848 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.172153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550933.172153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.172153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.172153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.172153}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030435800552368164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.247767}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550933.247767}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.247767}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.247767}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.247767}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032853126525878906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.33982}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550933.33982}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.33982}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.33982}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.33982}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06522059440612793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.452493}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550933.452493}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.452493}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.452493}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.452493}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023614168167114258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.522627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550933.522627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.522627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.522627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.522627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027747154235839844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.603775}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550933.603775}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.603775}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.603775}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.603775}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03099346160888672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1077:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1077', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.680342}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550933.680342}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.680342}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.680342}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.680342}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029901981353759766 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1077:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1077', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.761132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550933.761132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.761132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.761132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.761132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025954008102416992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1077:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1077', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.839535}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550933.839535}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.839535}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.839535}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.839535}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03735637664794922 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1077:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1077', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.93581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550933.93581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.93581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.93581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550933.93581}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039044857025146484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:13', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 18.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2016.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2357.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 16.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2016.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2357.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56457:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56457", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 16.0}, {"feature": 1250.0}, {"feature": 8.0}, {"feature": 2016.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1469.0}, {"feature": 7.0}, {"feature": 2334.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60566:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:60566:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "60566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56595:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56595", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 1283.0}, {"feature": 6.0}, {"feature": 1350.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56595:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56595", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 1283.0}, {"feature": 6.0}, {"feature": 1350.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1398.0}, {"feature": 1.0}, {"feature": 1398.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006838353076243271 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010827827046132321 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005475180223584175 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003396749496459961 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 849 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.075896}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550934.075896}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.075896}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.075896}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.075896}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0925753116607666 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.222878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550934.222878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.222878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.222878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.222878}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0657505989074707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.34023}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550934.34023}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.34023}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.34023}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.34023}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026508331298828125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56457:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56457', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.418465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550934.418465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.418465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.418465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.418465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05953836441040039 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60566:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.534625}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550934.534625}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.534625}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.534625}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.534625}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07511210441589355 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:60566:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '60566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.665242}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550934.665242}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.665242}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.665242}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.665242}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05155181884765625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56595:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56595', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.763293}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550934.763293}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.763293}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.763293}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.763293}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.042929649353027344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56595:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56595', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.85527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550934.85527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.85527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.85527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.85527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03067779541015625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.933627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550934.933627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.933627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.933627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550934.933627}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02707505226135254 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.013706}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.013706}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.013706}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.013706}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.013706}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04872941970825195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:02:14', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 4593.0}, {"feature": 6.0}, {"feature": 10185.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 4593.0}, {"feature": 4.0}, {"feature": 7389.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 4593.0}, {"feature": 2.0}, {"feature": 4593.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 4593.0}, {"feature": 3.0}, {"feature": 5991.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:30795:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "30795", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:30795:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "30795", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:30795:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "30795", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006836431507733377 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010821600705786664 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000547441013623029 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002373933792114258 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 850 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.140851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.140851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.140851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.140851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.140851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03857541084289551 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.225942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.225942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.225942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.225942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.225942}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04767775535583496 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.318719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.318719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.318719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.318719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.318719}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04207301139831543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.406227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.406227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.406227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.406227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.406227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05749392509460449 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.513132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.513132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.513132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.513132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.513132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030544281005859375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.591065}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.591065}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.591065}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.591065}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.591065}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03503131866455078 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.671228}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.671228}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.671228}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.671228}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.671228}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02649831771850586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.74832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.74832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.74832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.74832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.74832}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025333404541015625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:30795:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '30795', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.819889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.819889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.819889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.819889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.819889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029266357421875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:30795:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '30795', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.897418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.897418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.897418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.897418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.897418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022690773010253906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:30795:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '30795', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:30795:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "30795", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 25.0}, {"feature": 23.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 1968.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 26.0}, {"feature": 24.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 1968.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 22.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 1968.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25152:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25152", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 22.0}, {"feature": 1267.0}, {"feature": 11.0}, {"feature": 2402.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 1968.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 25.0}, {"feature": 21.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2380.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:15283:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "15283", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 20.0}, {"feature": 1244.0}, {"feature": 7.0}, {"feature": 1508.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2380.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42056:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42056", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42056:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42056", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 24165.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1778:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1778", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 549.0}, {"feature": 4.0}, {"feature": 616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006835538990791235 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010815271972493886 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005475180223584175 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0024156570434570312 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 851 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.993543}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550935.993543}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.993543}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.993543}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550935.993543}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029170513153076172 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:30795:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '30795', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.066663}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550936.066663}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.066663}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.066663}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.066663}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03341317176818848 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.149132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550936.149132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.149132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.149132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.149132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02805948257446289 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.244647}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550936.244647}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.244647}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.244647}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.244647}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03267383575439453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.325773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550936.325773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.325773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.325773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.325773}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03182840347290039 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25152:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25152', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.416726}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550936.416726}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.416726}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.416726}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.416726}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024944782257080078 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.505321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550936.505321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.505321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.505321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.505321}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0279848575592041 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:15283:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '15283', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.593313}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550936.593313}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.593313}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.593313}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.593313}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02311539649963379 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42056:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42056', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.687431}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550936.687431}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.687431}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.687431}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.687431}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02527308464050293 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42056:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42056', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.761519}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550936.761519}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.761519}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.761519}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.761519}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025233745574951172 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:15', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1778:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1778', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1778:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1778", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 549.0}, {"feature": 4.0}, {"feature": 616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 581.0}, {"feature": 2.0}, {"feature": 581.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7771:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7771", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 977.0}, {"feature": 7.0}, {"feature": 2144.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1469.0}, {"feature": 5.0}, {"feature": 1469.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7771:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7771", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 14.0}, {"feature": 13.0}, {"feature": 977.0}, {"feature": 7.0}, {"feature": 2144.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1469.0}, {"feature": 5.0}, {"feature": 1469.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4079:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4079", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4079:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4079", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4079:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4079", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4079:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4079", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13088:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13088", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 21.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2659.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3222.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13088:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13088", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 21.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2659.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 3199.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13088:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13088", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 23.0}, {"feature": 22.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2659.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3222.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006836182254742603 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010808939407456627 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005478110106196254 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003542184829711914 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 852 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.891615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550936.891615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.891615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.891615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.891615}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03041815757751465 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1778:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1778', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.980805}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550936.980805}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.980805}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.980805}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550936.980805}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03825569152832031 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7771:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7771', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.0935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550937.0935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.0935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.0935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.0935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028179645538330078 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7771:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7771', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.184189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550937.184189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.184189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.184189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.184189}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034471750259399414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4079:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4079', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.276036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550937.276036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.276036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.276036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.276036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05236387252807617 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4079:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4079', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.387724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550937.387724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.387724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.387724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.387724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0265653133392334 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4079:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4079', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.484324}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550937.484324}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.484324}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.484324}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.484324}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040291547775268555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4079:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4079', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.567749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550937.567749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.567749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.567749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.567749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040737152099609375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13088:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13088', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.654553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550937.654553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.654553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.654553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.654553}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027994632720947266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13088:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13088', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.727046}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550937.727046}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.727046}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.727046}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.727046}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024098634719848633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:16', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13088:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13088', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25442:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25442", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 21.0}, {"feature": 18.0}, {"feature": 1169.0}, {"feature": 8.0}, {"feature": 1758.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2196.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25442:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25442", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 22.0}, {"feature": 19.0}, {"feature": 1169.0}, {"feature": 8.0}, {"feature": 1758.0}, {"feature": 19.0}, {"feature": 19.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2196.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42044:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42044", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42044:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42044", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45832:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45832", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 16.0}, {"feature": 903.0}, {"feature": 8.0}, {"feature": 1521.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1597.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12591:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12591", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12591:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12591", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12591:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12591", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2352.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.00068353054879052 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010802632025960286 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005481039988808334 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002947568893432617 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 853 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.833012}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550937.833012}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.833012}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.833012}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.833012}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027950525283813477 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25442:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25442', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.906818}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550937.906818}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.906818}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.906818}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.906818}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03115081787109375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25442:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25442', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.983138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550937.983138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.983138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.983138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550937.983138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028541088104248047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42044:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42044', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.05638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550938.05638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.05638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.05638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.05638}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03410840034484863 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42044:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42044', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.135763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550938.135763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.135763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.135763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.135763}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031737565994262695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45832:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45832', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.2145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550938.2145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.2145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.2145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.2145}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025578737258911133 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12591:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12591', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.291737}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550938.291737}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.291737}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.291737}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.291737}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04174351692199707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12591:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12591', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.388182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550938.388182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.388182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.388182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.388182}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02488255500793457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12591:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12591', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.469799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550938.469799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.469799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.469799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.469799}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02991175651550293 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.556033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550938.556033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.556033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.556033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.556033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027280569076538086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:17', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006832550001708001 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010796605387317702 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005478110106196254 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025157928466796875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 854 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.686758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550938.686758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.686758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.686758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.686758}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04355287551879883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:18', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.808074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550938.808074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.808074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.808074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.808074}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03143501281738281 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:18', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.896916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550938.896916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.896916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.896916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.896916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025962114334106445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:18', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.968226}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550938.968226}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.968226}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.968226}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550938.968226}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0329129695892334 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:18', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.047337}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550939.047337}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.047337}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.047337}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.047337}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028644800186157227 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:18', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.121513}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550939.121513}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.121513}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.121513}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.121513}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034954071044921875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:18', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.206613}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550939.206613}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.206613}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.206613}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.206613}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03020501136779785 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:18', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.286152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550939.286152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.286152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.286152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.286152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04335927963256836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:18', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.380175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550939.380175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.380175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.380175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.380175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03150343894958496 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:18', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.457558}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550939.457558}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.457558}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.457558}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550939.457558}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04632091522216797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:02:18', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42050:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006832092141934087 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001079029803160059 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005481039988808334 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003564119338989258 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 855 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.210573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550940.210573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.210573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.210573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.210573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03372836112976074 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.303873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550940.303873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.303873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.303873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.303873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0416102409362793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.424576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550940.424576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.424576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.424576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.424576}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025560617446899414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.498709}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550940.498709}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.498709}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.498709}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.498709}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03379964828491211 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42050:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.576631}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550940.576631}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.576631}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.576631}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.576631}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026529312133789062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.646826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550940.646826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.646826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.646826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.646826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038014888763427734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.729308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550940.729308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.729308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.729308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.729308}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03548479080200195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.809772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550940.809772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.809772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.809772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.809772}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03381681442260742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.925793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550940.925793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.925793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.925793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550940.925793}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030965089797973633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.006424}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.006424}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.006424}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.006424}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.006424}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026880264282226562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:20', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:53678:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "53678", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 4593.0}, {"feature": 7.0}, {"feature": 11583.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12591:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12591", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12591:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12591", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 6.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12591:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12591", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12591:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12591", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006829053704805289 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001078435941909586 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005478110106196254 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019392967224121094 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 856 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.112391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.112391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.112391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.112391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.112391}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02387237548828125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.179524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.179524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.179524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.179524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.179524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03149056434631348 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.286568}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.286568}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.286568}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.286568}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.286568}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03331732749938965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.364223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.364223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.364223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.364223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.364223}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02297353744506836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:53678:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '53678', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.43138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.43138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.43138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.43138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.43138}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026204347610473633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.53567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.53567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.53567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.53567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.53567}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024886131286621094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.615505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.615505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.615505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.615505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.615505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04092884063720703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12591:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12591', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.715441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.715441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.715441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.715441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.715441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04432249069213867 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12591:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12591', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.814939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.814939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.814939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.814939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.814939}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022760391235351562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12591:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12591', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.893976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.893976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.893976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.893976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.893976}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02376389503479004 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12591:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12591', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12591:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12591", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12591:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12591", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12591:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12591", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 7.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13088:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13088", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 25.0}, {"feature": 24.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2659.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3222.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13088:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13088", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 23.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2659.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3222.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13088:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13088", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 23.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2659.0}, {"feature": 24.0}, {"feature": 24.0}, {"feature": 1469.0}, {"feature": 10.0}, {"feature": 3222.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4079:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4079", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45832:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45832", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 19.0}, {"feature": 17.0}, {"feature": 903.0}, {"feature": 8.0}, {"feature": 1521.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1016.0}, {"feature": 5.0}, {"feature": 1597.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36879:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36879", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1361.0}, {"feature": 7.0}, {"feature": 1882.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2352.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12226:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12226", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 1783.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1451.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006834130584508997 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010779089129838227 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005481039988808334 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0035533905029296875 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 857 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.99468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550941.99468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.99468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.99468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550941.99468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03061819076538086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12591:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12591', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.095992}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550942.095992}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.095992}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.095992}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.095992}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07351183891296387 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12591:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12591', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.240423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550942.240423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.240423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.240423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.240423}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0457768440246582 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12591:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12591', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.332428}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550942.332428}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.332428}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.332428}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.332428}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026506662368774414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13088:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13088', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.412176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550942.412176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.412176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.412176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.412176}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021515846252441406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13088:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13088', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.48806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550942.48806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.48806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.48806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.48806}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03710365295410156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13088:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13088', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.578851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550942.578851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.578851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.578851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.578851}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.045468807220458984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4079:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '4079', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.69376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550942.69376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.69376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.69376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.69376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03433847427368164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45832:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '45832', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.78229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550942.78229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.78229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.78229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.78229}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03251004219055176 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36879:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36879', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.860786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550942.860786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.860786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.860786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.860786}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02799510955810547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:21', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12226:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12226', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12226:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12226", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 1783.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1451.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7056:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7056", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 17.0}, {"feature": 14.0}, {"feature": 1244.0}, {"feature": 8.0}, {"feature": 2284.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 5.0}, {"feature": 1876.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7056:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7056", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 15.0}, {"feature": 1244.0}, {"feature": 8.0}, {"feature": 2284.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 5.0}, {"feature": 1876.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7056:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7056", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 17.0}, {"feature": 14.0}, {"feature": 1244.0}, {"feature": 8.0}, {"feature": 2284.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1446.0}, {"feature": 4.0}, {"feature": 1446.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7056:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7056", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 19.0}, {"feature": 16.0}, {"feature": 1244.0}, {"feature": 8.0}, {"feature": 2284.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1446.0}, {"feature": 5.0}, {"feature": 1876.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63250:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63250", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63250:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63250", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63250:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63250", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63250:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63250", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63250:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63250", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006838605991816517 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010773602434459785 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005481514963321388 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002808809280395508 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 858 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.980485}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550942.980485}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.980485}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.980485}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550942.980485}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03026556968688965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12226:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '12226', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.07432}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550943.07432}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.07432}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.07432}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.07432}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05034685134887695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7056:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7056', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.171491}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550943.171491}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.171491}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.171491}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.171491}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03162193298339844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7056:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7056', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.269933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550943.269933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.269933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.269933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.269933}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0244600772857666 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7056:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7056', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.339377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550943.339377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.339377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.339377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.339377}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021322011947631836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7056:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7056', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.408243}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550943.408243}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.408243}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.408243}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.408243}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03110790252685547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63250:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '63250', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.488121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550943.488121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.488121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.488121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.488121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028148651123046875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63250:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '63250', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.57034}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550943.57034}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.57034}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.57034}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.57034}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028366804122924805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63250:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '63250', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.646319}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550943.646319}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.646319}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.646319}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.646319}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02535724639892578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63250:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '63250', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.717726}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550943.717726}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.717726}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.717726}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.717726}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03536677360534668 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:22', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63250:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '63250', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63250:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63250", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:63250:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "63250", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18427:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18427", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18427:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18427", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18427:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18427", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18427:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18427", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14865:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14865", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 23.0}, {"feature": 22.0}, {"feature": 1267.0}, {"feature": 10.0}, {"feature": 2340.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2508.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 4593.0}, {"feature": 12.0}, {"feature": 17175.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 4593.0}, {"feature": 11.0}, {"feature": 15777.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 12981.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006842516939051675 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001076793899191986 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005481989937834442 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0031290054321289062 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 859 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.846387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550943.846387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.846387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.846387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.846387}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025644302368164062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63250:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '63250', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.919307}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550943.919307}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.919307}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.919307}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550943.919307}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025911331176757812 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:63250:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '63250', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.016179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.016179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.016179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.016179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.016179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0457766056060791 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18427:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18427', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.106752}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.106752}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.106752}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.106752}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.106752}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026262521743774414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18427:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18427', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.187661}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.187661}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.187661}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.187661}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.187661}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0215451717376709 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18427:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18427', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.258373}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.258373}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.258373}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.258373}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.258373}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03849029541015625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18427:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18427', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.354964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.354964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.354964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.354964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.354964}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0269777774810791 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14865:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '14865', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.424957}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.424957}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.424957}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.424957}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.424957}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025795459747314453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.518944}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.518944}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.518944}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.518944}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.518944}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026451826095581055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.591099}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.591099}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.591099}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.591099}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.591099}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03417015075683594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:23', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 4593.0}, {"feature": 10.0}, {"feature": 14379.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42050:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42050:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42050", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42060:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42060", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 6.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 4593.0}, {"feature": 14.0}, {"feature": 22767.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1909:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1909", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1909:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1909", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1909:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1909", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1909:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1909", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1909:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1909", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006843447036158596 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010761711266753773 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005485049914568663 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002557516098022461 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 860 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.710451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.710451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.710451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.710451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.710451}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024977684020996094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.780098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.780098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.780098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.780098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.780098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02720189094543457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.853721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.853721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.853721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.853721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.853721}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025909900665283203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42050:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.927724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550944.927724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.927724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.927724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550944.927724}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033774375915527344 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42050:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42050', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.007183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550945.007183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.007183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.007183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.007183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0284116268157959 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42060:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42060', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.084244}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550945.084244}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.084244}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.084244}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.084244}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02187490463256836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1909:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1909', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.14991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550945.14991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.14991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.14991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.14991}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04453420639038086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1909:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1909', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.238739}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550945.238739}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.238739}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.238739}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.238739}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07189083099365234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1909:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1909', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.357563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550945.357563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.357563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.357563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.357563}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021074533462524414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1909:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1909', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.425736}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550945.425736}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.425736}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.425736}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.425736}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030165433883666992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:24', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1909:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1909', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32137:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32137", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32137:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32137", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32137:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32137", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:32137:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "32137", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47546:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47546", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47546:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47546", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47546:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47546", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46583:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46583", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46583:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46583", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46583:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46583", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006847531580973014 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010756126889918925 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005488109891302884 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004270792007446289 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 861 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.546803}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550945.546803}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.546803}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.546803}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.546803}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.038434505462646484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32137:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '32137', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.638611}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550945.638611}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.638611}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.638611}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.638611}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030684471130371094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32137:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '32137', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.731289}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550945.731289}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.731289}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.731289}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.731289}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030393362045288086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32137:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '32137', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.846143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550945.846143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.846143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.846143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.846143}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03559088706970215 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:02:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:32137:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '32137', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.931642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550945.931642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.931642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.931642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550945.931642}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.053142547607421875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:02:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47546:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47546', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.047265}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550946.047265}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.047265}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.047265}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.047265}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0421137809753418 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47546:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47546', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.133971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550946.133971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.133971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.133971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.133971}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022910594940185547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47546:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '47546', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.207637}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550946.207637}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.207637}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.207637}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.207637}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028835535049438477 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46583:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '46583', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.293552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550946.293552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.293552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.293552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.293552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04459118843078613 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46583:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '46583', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.385031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550946.385031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.385031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.385031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.385031}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026562929153442383 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:25', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46583:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '46583', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46583:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46583", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62983:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62983", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1460.0}, {"feature": 7.0}, {"feature": 2009.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2068.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62983:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62983", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 17.0}, {"feature": 16.0}, {"feature": 1460.0}, {"feature": 7.0}, {"feature": 2009.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2068.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:62983:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "62983", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 17.0}, {"feature": 1460.0}, {"feature": 7.0}, {"feature": 2009.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2068.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57664:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57664", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 18.0}, {"feature": 15.0}, {"feature": 1169.0}, {"feature": 5.0}, {"feature": 1169.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1615.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:57664:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "57664", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 19.0}, {"feature": 16.0}, {"feature": 1169.0}, {"feature": 5.0}, {"feature": 1169.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1615.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25464:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25464", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 549.0}, {"feature": 9.0}, {"feature": 1582.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 727.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:25464:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "25464", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 14.0}, {"feature": 13.0}, {"feature": 549.0}, {"feature": 9.0}, {"feature": 1582.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 727.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24285:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24285", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24285:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24285", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006864010013333088 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001076075482648512 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005492144846357405 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005345344543457031 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 862 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.490457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550946.490457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.490457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.490457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.490457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039890289306640625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46583:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '46583', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.574961}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550946.574961}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.574961}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.574961}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.574961}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025789737701416016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62983:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62983', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.650616}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550946.650616}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.650616}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.650616}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.650616}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025933027267456055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62983:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62983', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.730923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550946.730923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.730923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.730923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.730923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034377098083496094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:62983:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '62983', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.824495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550946.824495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.824495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.824495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.824495}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029284000396728516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57664:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57664', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.911328}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550946.911328}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.911328}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.911328}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550946.911328}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02991628646850586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:57664:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '57664', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.019058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550947.019058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.019058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.019058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.019058}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03186440467834473 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25464:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25464', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.110266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550947.110266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.110266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.110266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.110266}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031887054443359375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:25464:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '25464', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.223907}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550947.223907}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.223907}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.223907}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.223907}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030903339385986328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24285:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '24285', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.319731}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550947.319731}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.319731}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.319731}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.319731}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034172773361206055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:02:26', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24285:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '24285', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24285:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24285", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42038:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42038", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006870567244326487 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010756241543406232 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005496179801411927 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0037384033203125 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 863 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.432239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550947.432239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.432239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.432239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.432239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02571845054626465 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:24285:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '24285', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.518214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550947.518214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.518214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.518214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.518214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03139758110046387 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42038:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42038', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.605411}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550947.605411}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.605411}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.605411}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.605411}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030282258987426758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.690001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550947.690001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.690001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.690001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.690001}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030595064163208008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.773545}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550947.773545}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.773545}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.773545}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.773545}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026997804641723633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.849085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550947.849085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.849085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.849085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.849085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025156497955322266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.922922}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550947.922922}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.922922}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.922922}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550947.922922}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025713205337524414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.016935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550948.016935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.016935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.016935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.016935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022071361541748047 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.090566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550948.090566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.090566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.090566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.090566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026079177856445312 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.163301}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550948.163301}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.163301}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.163301}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.163301}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03754734992980957 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:27', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006870331321638163 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010750017298565976 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005497529928106815 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003395557403564453 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 864 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.789921}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550948.789921}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.789921}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.789921}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.789921}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03953361511230469 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.888626}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550948.888626}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.888626}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.888626}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.888626}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030307769775390625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.975973}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550948.975973}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.975973}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.975973}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550948.975973}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034751176834106445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.068036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550949.068036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.068036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.068036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.068036}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03483271598815918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.163394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550949.163394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.163394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.163394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.163394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033428192138671875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.253132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550949.253132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.253132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.253132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.253132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02485036849975586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.332708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550949.332708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.332708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.332708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.332708}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04087018966674805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.428181}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550949.428181}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.428181}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.428181}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.428181}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027279138565063477 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.517419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550949.517419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.517419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.517419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.517419}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026573896408081055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.612116}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550949.612116}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.612116}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.612116}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.612116}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.26387739181518555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:28', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1657:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1657", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46583:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46583", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46583:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46583", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46583:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46583", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:46583:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "46583", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56388:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56388", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 1192.0}, {"feature": 7.0}, {"feature": 1324.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1615.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006868952846240705 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010743878023860242 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005498880054801702 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0036590099334716797 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 865 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.964298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550949.964298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.964298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.964298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550949.964298}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05505180358886719 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.068494}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550950.068494}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.068494}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.068494}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.068494}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03680610656738281 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.156699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550950.156699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.156699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.156699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.156699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029880523681640625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.236604}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550950.236604}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.236604}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.236604}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.236604}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027009010314941406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.320632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550950.320632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.320632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.320632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.320632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0272674560546875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1657:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '1657', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.404055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550950.404055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.404055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.404055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.404055}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039934396743774414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46583:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '46583', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.524061}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550950.524061}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.524061}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.524061}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.524061}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029874086380004883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46583:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '46583', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.605566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550950.605566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.605566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.605566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.605566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02877044677734375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46583:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '46583', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.711324}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550950.711324}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.711324}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.711324}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.711324}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039838314056396484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:46583:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '46583', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.811257}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550950.811257}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.811257}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.811257}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.811257}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04328727722167969 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:29', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56388:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56388', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56388:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56388", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 16.0}, {"feature": 15.0}, {"feature": 1192.0}, {"feature": 7.0}, {"feature": 1324.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1615.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:11510:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "11510", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 25.0}, {"feature": 22.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 2014.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2503.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:11510:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "11510", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 24.0}, {"feature": 21.0}, {"feature": 925.0}, {"feature": 7.0}, {"feature": 2014.0}, {"feature": 22.0}, {"feature": 22.0}, {"feature": 1469.0}, {"feature": 9.0}, {"feature": 2503.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 4593.0}, {"feature": 14.0}, {"feature": 19971.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42062:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42062", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550800.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 18.0}, {"feature": 18.0}, {"feature": 4593.0}, {"feature": 15.0}, {"feature": 21369.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21996:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21996", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 26.0}, {"feature": 23.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2363.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2073.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:21996:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "21996", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 25.0}, {"feature": 22.0}, {"feature": 1384.0}, {"feature": 11.0}, {"feature": 2363.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 8.0}, {"feature": 2073.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42647:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42647", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42647:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42647", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42647:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42647", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006868473604868874 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010737682320150668 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000550091004697606 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0025327205657958984 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 866 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.932338}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550950.932338}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.932338}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.932338}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550950.932338}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04494762420654297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56388:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56388', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.028926}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550951.028926}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.028926}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.028926}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.028926}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02786731719970703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:11510:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '11510', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.10465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550951.10465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.10465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.10465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.10465}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03367209434509277 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:11510:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '11510', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.214873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550951.214873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.214873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.214873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.214873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030881166458129883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.295589}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550951.295589}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.295589}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.295589}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.295589}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030284643173217773 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42062:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42062', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550848.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.373742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550951.373742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.373742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.373742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.373742}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031049251556396484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21996:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '21996', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.46056}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550951.46056}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.46056}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.46056}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.46056}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03601241111755371 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:21996:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '21996', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.592817}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550951.592817}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.592817}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.592817}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.592817}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04225969314575195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42647:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '42647', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.722154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550951.722154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.722154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.722154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.722154}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04264974594116211 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42647:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '42647', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.830588}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550951.830588}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.830588}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.830588}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.830588}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0295562744140625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:30', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42647:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '42647', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42647:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42647", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42647:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42647", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56148:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56148", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56148:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56148", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56148:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56148", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56148:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56148", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 4.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:40302:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "40302", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:40302:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "40302", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:40302:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "40302", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:40302:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "40302", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006865021017258675 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001073196905704032 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005498880054801702 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0022156238555908203 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 867 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.93352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550951.93352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.93352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.93352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550951.93352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03371262550354004 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42647:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '42647', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.01434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550952.01434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.01434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.01434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.01434}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025445938110351562 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42647:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '42647', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.092367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550952.092367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.092367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.092367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.092367}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06455731391906738 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56148:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '56148', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.221218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550952.221218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.221218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.221218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.221218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03444361686706543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56148:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '56148', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.304632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550952.304632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.304632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.304632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.304632}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026473283767700195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56148:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '56148', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.378295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550952.378295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.378295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.378295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.378295}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04980206489562988 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56148:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '56148', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.474577}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550952.474577}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.474577}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.474577}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.474577}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.056803226470947266 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:40302:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '40302', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.57727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550952.57727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.57727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.57727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.57727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05486035346984863 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:40302:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '40302', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.677404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550952.677404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.677404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.677404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.677404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02274155616760254 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:40302:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '40302', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.751469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550952.751469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.751469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.751469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.751469}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027166366577148438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:02:31', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:40302:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '40302', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:40302:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "40302", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:40302:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "40302", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:40302:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "40302", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42052:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42052", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42052:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42052", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 21.0}, {"feature": 21.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42052:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42052", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 4593.0}, {"feature": 16.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 4593.0}, {"feature": 10.0}, {"feature": 15777.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 4593.0}, {"feature": 9.0}, {"feature": 14379.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 4593.0}, {"feature": 12.0}, {"feature": 18573.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 4593.0}, {"feature": 11.0}, {"feature": 17175.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006862179622159249 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001072611156533878 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005497529928106815 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002254009246826172 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 868 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.848854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550952.848854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.848854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.848854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.848854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030846118927001953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:40302:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '40302', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.931727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550952.931727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.931727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.931727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550952.931727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025107860565185547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:40302:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '40302', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.019168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550953.019168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.019168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.019168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.019168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026437997817993164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:40302:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '40302', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.104935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550953.104935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.104935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.104935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.104935}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029881954193115234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42052:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42052', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.18854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550953.18854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.18854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.18854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.18854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04712033271789551 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42052:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42052', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.298945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550953.298945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.298945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.298945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.298945}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0560460090637207 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42052:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42052', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.403956}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550953.403956}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.403956}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.403956}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.403956}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029616355895996094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.486409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550953.486409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.486409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.486409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.486409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027738571166992188 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.560306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550953.560306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.560306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.560306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.560306}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03532600402832031 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.673755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550953.673755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.673755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.673755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.673755}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06377053260803223 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:32', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42064:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42064", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 4593.0}, {"feature": 8.0}, {"feature": 12981.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7771:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7771", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 14.0}, {"feature": 13.0}, {"feature": 977.0}, {"feature": 7.0}, {"feature": 2144.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1469.0}, {"feature": 5.0}, {"feature": 1469.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:7771:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "7771", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 15.0}, {"feature": 14.0}, {"feature": 977.0}, {"feature": 7.0}, {"feature": 2144.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 1469.0}, {"feature": 5.0}, {"feature": 1469.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:20663:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "20663", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:20663:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "20663", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 2.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:20663:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "20663", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:20663:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "20663", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:20663:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "20663", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:20663:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "20663", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 3.0}, {"feature": 100.0}, {"feature": 1.0}, {"feature": 100.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2794:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2794", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 14.0}, {"feature": 12.0}, {"feature": 551.0}, {"feature": 5.0}, {"feature": 750.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006862067655254031 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010719938770754683 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005498880054801702 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0026001930236816406 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 869 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.825272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550953.825272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.825272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.825272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.825272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02655816078186035 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42064:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42064', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.903219}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550953.903219}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.903219}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.903219}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.903219}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028376340866088867 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7771:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7771', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.987523}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550953.987523}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.987523}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.987523}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550953.987523}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02479839324951172 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:7771:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '7771', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.067221}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550954.067221}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.067221}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.067221}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.067221}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02742934226989746 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:20663:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '20663', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.14344}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550954.14344}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.14344}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.14344}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.14344}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027010440826416016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:20663:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '20663', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.222516}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550954.222516}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.222516}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.222516}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.222516}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.052575111389160156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:20663:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '20663', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.329255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550954.329255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.329255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.329255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.329255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0387115478515625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:20663:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '20663', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.418163}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550954.418163}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.418163}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.418163}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.418163}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03140425682067871 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:20663:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '20663', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.499857}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550954.499857}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.499857}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.499857}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.499857}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026084184646606445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:20663:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '20663', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.57379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550954.57379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.57379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.57379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.57379}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0345766544342041 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:33', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2794:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '2794', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2794:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2794", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 551.0}, {"feature": 5.0}, {"feature": 750.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1162.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2794:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2794", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 12.0}, {"feature": 10.0}, {"feature": 551.0}, {"feature": 5.0}, {"feature": 750.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 727.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:2794:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "2794", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550700.0}, "features": [{"feature": 13.0}, {"feature": 11.0}, {"feature": 551.0}, {"feature": 5.0}, {"feature": 750.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 581.0}, {"feature": 3.0}, {"feature": 727.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56595:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56595", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 1283.0}, {"feature": 6.0}, {"feature": 1350.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 1469.0}, {"feature": 5.0}, {"feature": 1469.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56595:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56595", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 1283.0}, {"feature": 6.0}, {"feature": 1350.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1469.0}, {"feature": 5.0}, {"feature": 1469.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:56595:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "56595", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 1283.0}, {"feature": 6.0}, {"feature": 1350.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 1469.0}, {"feature": 5.0}, {"feature": 1469.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37575:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37575", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 27.0}, {"feature": 24.0}, {"feature": 1043.0}, {"feature": 6.0}, {"feature": 1242.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 3657.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37575:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37575", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 25.0}, {"feature": 22.0}, {"feature": 1043.0}, {"feature": 6.0}, {"feature": 1242.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 3657.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:37575:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "37575", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 26.0}, {"feature": 23.0}, {"feature": 1043.0}, {"feature": 6.0}, {"feature": 1242.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 1469.0}, {"feature": 11.0}, {"feature": 3657.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.5:59848:94.23.23.52:80", "ip_d": "94.23.23.52", "ip_o": "10.100.200.5", "port_d": "80", "port_o": "59848", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 731.0}, {"feature": 3.0}, {"feature": 731.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 633.0}, {"feature": 3.0}, {"feature": 633.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006868358714848586 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001071538106788932 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.000550091004697606 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003947734832763672 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 870 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.731749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550954.731749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.731749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.731749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.731749}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026042938232421875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2794:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '2794', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.811707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550954.811707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.811707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.811707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.811707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04161810874938965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2794:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '2794', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.916746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550954.916746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.916746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.916746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550954.916746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02964329719543457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:2794:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '2794', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550720.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.025433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550955.025433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.025433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.025433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.025433}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03034663200378418 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56595:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56595', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.108047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550955.108047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.108047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.108047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.108047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0322415828704834 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56595:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56595', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.18923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550955.18923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.18923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.18923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.18923}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025696277618408203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:56595:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '56595', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.273877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550955.273877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.273877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.273877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.273877}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03225994110107422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37575:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37575', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.356144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550955.356144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.356144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.356144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.356144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025670766830444336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37575:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37575', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.43597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550955.43597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.43597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.43597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.43597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03625178337097168 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:34', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:37575:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '37575', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.523551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99999934}, "timestamp": {"timestamp": 1683550955.523551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.523551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.523551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550955.523551}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025177955627441406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9899993538856506, 'timestamp': '08/05/2023 13:02:34', 'ip_o': '10.100.200.5', 'ip_d': '94.23.23.52', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.5:59848:94.23.23.52:80', 'protocol': 'TCP', 'port_o': '59848', 'port_d': '80', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.989999354 +timestamp: "08/05/2023 13:02:34" +ip_o: "10.100.200.5" +ip_d: "94.23.23.52" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.5:59848:94.23.23.52:80" +protocol: "TCP" +port_o: "59848" +port_d: "80" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" + } +} +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } + } + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } + } + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" + } +} +time_start: 1.68355059e+09 +time_end: 1.68355098e+09 + +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 38 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.7723657939932309 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.5:59848:94.23.23.52:80", "ip_d": "94.23.23.52", "ip_o": "10.100.200.5", "port_d": "80", "port_o": "59848", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 731.0}, {"feature": 3.0}, {"feature": 731.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 633.0}, {"feature": 3.0}, {"feature": 633.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.5:59848:94.23.23.52:80", "ip_d": "94.23.23.52", "ip_o": "10.100.200.5", "port_d": "80", "port_o": "59848", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 731.0}, {"feature": 3.0}, {"feature": 731.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 562.0}, {"feature": 2.0}, {"feature": 562.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1778:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1778", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 549.0}, {"feature": 4.0}, {"feature": 616.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 1016.0}, {"feature": 4.0}, {"feature": 1451.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1778:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1778", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 549.0}, {"feature": 4.0}, {"feature": 616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:1778:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "1778", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 549.0}, {"feature": 4.0}, {"feature": 616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 1016.0}, {"feature": 3.0}, {"feature": 1016.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42040:192.168.1.115:443", "ip_d": "192.168.1.115", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42040", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550600.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 293.0}, {"feature": 1.0}, {"feature": 293.0}, {"feature": 23.0}, {"feature": 23.0}, {"feature": 4593.0}, {"feature": 17.0}, {"feature": 25563.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36036:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36036", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36036:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36036", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:36036:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "36036", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:6267:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "6267", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683550500.0}, "features": [{"feature": 20.0}, {"feature": 19.0}, {"feature": 1384.0}, {"feature": 12.0}, {"feature": 2752.0}, {"feature": 20.0}, {"feature": 20.0}, {"feature": 1469.0}, {"feature": 6.0}, {"feature": 1904.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006882743584500021 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.001071762991215837 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005502940039150417 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0044977664947509766 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 871 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550956.411199}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99749935}, "timestamp": {"timestamp": 1683550956.411199}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550956.411199}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550956.411199}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550956.411199}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03716254234313965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9999993443489075, 'timestamp': '08/05/2023 13:02:36', 'ip_o': '10.100.200.5', 'ip_d': '94.23.23.52', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.5:59848:94.23.23.52:80', 'protocol': 'TCP', 'port_o': '59848', 'port_d': '80', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.999999344 +timestamp: "08/05/2023 13:02:36" +ip_o: "10.100.200.5" +ip_d: "94.23.23.52" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.5:59848:94.23.23.52:80" +protocol: "TCP" +port_o: "59848" +port_d: "80" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" + } +} +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } + } + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } + } + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" + } +} +time_start: 1.68355059e+09 +time_end: 1.68355098e+09 + +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 39 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.6097800550051033 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550957.121769}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99799937}, "timestamp": {"timestamp": 1683550957.121769}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.121769}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.121769}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.121769}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03179216384887695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9899993538856506, 'timestamp': '08/05/2023 13:02:36', 'ip_o': '10.100.200.5', 'ip_d': '94.23.23.52', 'tag_name': 'Crypto', 'tag': 1, 'flow_id': '10.100.200.5:59848:94.23.23.52:80', 'protocol': 'TCP', 'port_o': '59848', 'port_d': '80', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Crypto attack detected +INFO:root:Notifying the Attack Mitigator component about the attack in order to block the connection... +INFO:root:Sending the connection information to the Attack Mitigator component... +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation request: confidence: 0.989999354 +timestamp: "08/05/2023 13:02:36" +ip_o: "10.100.200.5" +ip_d: "94.23.23.52" +tag_name: "Crypto" +tag: 1 +flow_id: "10.100.200.5:59848:94.23.23.52:80" +protocol: "TCP" +port_o: "59848" +port_d: "80" +ml_id: "crypto_5g_rf_spider_features.onnx" +service_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" + } +} +endpoint_id { + topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } + } + device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } + } + endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" + } +} +time_start: 1.68355059e+09 +time_end: 1.68355098e+09 + +DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:PerformMitigation result: +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:am_notification_times length: 40 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:last am_notification_time: 0.573403952002991 +INFO:root:Attack Mitigator notified +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550957.773961}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550957.773961}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.773961}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.773961}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.773961}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02692437171936035 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1778:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1778', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550957.850828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550957.850828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.850828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.850828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.850828}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03650975227355957 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1778:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1778', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550957.944725}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550957.944725}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.944725}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.944725}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550957.944725}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03044748306274414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:1778:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '1778', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550958.036477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550958.036477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.036477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.036477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.036477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03297257423400879 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.115', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42040:192.168.1.115:443', 'protocol': 'TCP', 'port_o': '42040', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550592.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550958.129597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550958.129597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.129597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.129597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.129597}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02575230598449707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36036:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36036', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550958.203408}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550958.203408}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.203408}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.203408}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.203408}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035372257232666016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:02:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36036:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36036', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550958.286682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550958.286682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.286682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.286682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.286682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04996514320373535 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:36036:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '36036', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550958.418554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550958.418554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.418554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.418554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550958.418554}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03211569786071777 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:36', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:6267:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '6267', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550464.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetFeaturesIds request: {"message": ""} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetFeaturesIds reply: {"auto_features": [3.0, 5.0, 7.0, 8.0, 9.0, 17.0, 19.0, 21.0, 22.0, 23.0]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetScalabilityConfig request: {"sampling_mode": 3, "sampling_rate": 0.8, "sampling_snapshots": 100.0, "time_to_stabilize": 2.0} +INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Received scalability config request for Exp 3 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sampling snapshots: 100.0 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sampling rate: 0.800000011920929 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sampling mode: Last +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetScalabilityConfig reply: {"message": "CSV generated"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Starting async prediction accuracy analysis exp 3 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Correct csv load: True +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "5a45a53f-6116-4774-a1e3-b5cd40f767ea"}}, "time_end": 1683551000.0, "time_start": 1683551000.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3d7919c5-1875-4faa-a1b9-93866d877207 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Average inference time: 0.0006907791688417751 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Max inference time: 0.030769516015425324 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Min inference time: 0.0002900889958254993 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Standard deviation inference time: 0.0010736961115064435 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Median inference time: 0.0005506750021595508 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.010003805160522461 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 872 +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550966.150458}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550966.150458}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.150458}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.150458}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.150458}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.049768686294555664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550966.252805}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550966.252805}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.252805}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.252805}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.252805}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02921891212463379 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550966.335072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550966.335072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.335072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.335072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.335072}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03594088554382324 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 1}, "timestamp": {"timestamp": 1683550966.426779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.996666}, "timestamp": {"timestamp": 1683550966.426779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.426779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.426779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 2}, "timestamp": {"timestamp": 1683550966.426779}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server + +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030443191528320312 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:02:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "5a45a53f-6116-4774-a1e3-b5cd40f767ea" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683550976.0, 'time_end': 1683550976.0} diff --git a/manifests/l3_attackmitigatorservice.yaml b/manifests/l3_attackmitigatorservice.yaml index a01ae50058d702e90d0861c26644923ebe45c13e..abac0bed514f8c9af275d2ab0bda510df5a70e89 100644 --- a/manifests/l3_attackmitigatorservice.yaml +++ b/manifests/l3_attackmitigatorservice.yaml @@ -71,29 +71,6 @@ spec: strategy: type: Recreate ---- -apiVersion: autoscaling/v2 -kind: HorizontalPodAutoscaler -metadata: - name: l3-attackmitigatorservice-hpa -spec: - scaleTargetRef: - apiVersion: apps/v1 - kind: Deployment - name: l3-attackmitigatorservice - minReplicas: 1 - maxReplicas: 10 - metrics: - - type: Resource - resource: - name: cpu - target: - type: Utilization - averageUtilization: 80 - behavior: - scaleDown: - stabilizationWindowSeconds: 120 - --- apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor diff --git a/manifests/l3_centralizedattackdetectorservice.yaml b/manifests/l3_centralizedattackdetectorservice.yaml index 0432f20897391a843418fd61c8d6a14dad970c49..6f5c307c9b1f74471966ab028a9500a02bbb4fd7 100644 --- a/manifests/l3_centralizedattackdetectorservice.yaml +++ b/manifests/l3_centralizedattackdetectorservice.yaml @@ -70,29 +70,6 @@ spec: targetPort: 10001 strategy: type: Recreate - ---- -apiVersion: autoscaling/v2 -kind: HorizontalPodAutoscaler -metadata: - name: l3-centralizedattackdetectorservice-hpa -spec: - scaleTargetRef: - apiVersion: apps/v1 - kind: Deployment - name: l3-centralizedattackdetectorservice - minReplicas: 1 - maxReplicas: 10 - metrics: - - type: Resource - resource: - name: cpu - target: - type: Utilization - averageUtilization: 80 - behavior: - scaleDown: - stabilizationWindowSeconds: 120 --- apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor diff --git a/proto/l3_centralizedattackdetector.proto b/proto/l3_centralizedattackdetector.proto index 4fc8ab22bcaa22dfe60d46f988de3b9d4376b89e..f97245ef72b2db2504809bdba7ac08e380e78b72 100644 --- a/proto/l3_centralizedattackdetector.proto +++ b/proto/l3_centralizedattackdetector.proto @@ -70,7 +70,7 @@ message L3CentralizedattackdetectorBatchInput { message L3ScalabilityConfig { float time_to_stabilize = 1; float sampling_rate = 2; - float sampling_interval = 3; + float sampling_snapshots = 3; int32 sampling_mode = 4; } diff --git a/scalability_accuracy.csv b/scalability_accuracy.csv index 5b08d66cdce302d130a64935a4dba06be34070d9..61624b27c876324b6e1820ce97a3d5807c359516 100644 --- a/scalability_accuracy.csv +++ b/scalability_accuracy.csv @@ -1,4 +1 @@ -TIME_CONS OVERALL_ACCURACY CRYPTO_ACCURACY TOTAL_PREDICTIONS TOTAL_POSITIVES F_POSITIVES T_NEGATIVES F_NEGATIVES CONFIDENCE TIMESTAMP TIME_TO_STABILIZE -60 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 |18/04/2023 09:11:32| 2 -60 0.998019814491272 1.0 3536.0 3.0 0.0 3533.0 7.0 1.0 |18/04/2023 10:20:22| 5 -0.800000011920929 0.9972761273384094 1.0 2938.0 3.0 0.0 2935.0 8.0 1.0 |19/04/2023 11:53:30| 3.0 +F1_SCORE_MACRO F1_SCORE_WEIGHTED BALANCED_ACCURACY PRECISION_SCORE RECALL_SCORE OVERALL_ACCURACY CRYPTO_ACCURACY TOTAL_PREDICTIONS TOTAL_POSITIVES F_POSITIVES T_NEGATIVES F_NEGATIVES CONFIDENCE TIMESTAMP_START TIMESTAMP_FINISH SAMPLING_SNAPSHOTS SAMPLING_RATE SAMPLING_MODE TIME_TO_STABILIZE \ No newline at end of file diff --git a/src/l3_centralizedattackdetector/service/cad_compare.py b/src/l3_centralizedattackdetector/service/cad_compare.py new file mode 100644 index 0000000000000000000000000000000000000000..bd209633f28428c60a7f0c4f5dc4a4c7c3515d61 --- /dev/null +++ b/src/l3_centralizedattackdetector/service/cad_compare.py @@ -0,0 +1,755 @@ +# Copyright 2022-2023 ETSI TeraFlowSDN - TFS OSG (https://tfs.etsi.org/) +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +from __future__ import print_function +from datetime import datetime +from datetime import timedelta + +import os +import numpy as np +import onnxruntime as rt +import logging +import time + +import csv +from multiprocessing import Process +from multiprocessing import Value + +from common.proto.l3_centralizedattackdetector_pb2 import Empty, AutoFeatures +from common.proto.l3_centralizedattackdetector_pb2_grpc import L3CentralizedattackdetectorServicer + +from common.proto.l3_attackmitigator_pb2 import L3AttackmitigatorOutput + +from common.proto.monitoring_pb2 import KpiDescriptor +from common.proto.kpi_sample_types_pb2 import KpiSampleType + +from monitoring.client.MonitoringClient import MonitoringClient +from common.proto.monitoring_pb2 import Kpi + +from common.tools.timestamp.Converters import timestamp_utcnow_to_float +from common.proto.context_pb2 import Timestamp, SliceId, ConnectionId + +from l3_attackmitigator.client.l3_attackmitigatorClient import l3_attackmitigatorClient + +import uuid + +import sklearn.metrics as metrics +import numpy as np + +from common.method_wrappers.Decorator import MetricsPool, safe_and_metered_rpc_method + +LOGGER = logging.getLogger(__name__) +current_dir = os.path.dirname(os.path.abspath(__file__)) + +# Demo constants +DEMO_MODE = True +ATTACK_IPS = ["37.187.95.110", "91.121.140.167", "94.23.23.52", "94.23.247.226", "149.202.83.171"] +TIME_START = time.time() +METRICS_POOL = MetricsPool('l3_centralizedattackdetector', 'RPC') + + +class ConnectionInfo: + def __init__(self, ip_o, port_o, ip_d, port_d): + self.ip_o = ip_o + self.port_o = port_o + self.ip_d = ip_d + self.port_d = port_d + + def __eq__(self, other): + return ( + self.ip_o == other.ip_o + and self.port_o == other.port_o + and self.ip_d == other.ip_d + and self.port_d == other.port_d + ) + + def __str__(self): + return "ip_o: " + self.ip_o + "\nport_o: " + self.port_o + "\nip_d: " + self.ip_d + "\nport_d: " + self.port_d + + +class l3_centralizedattackdetectorServiceServicerImpl(L3CentralizedattackdetectorServicer): + + """ + Initialize variables, prediction model and clients of components used by CAD + """ + + def __init__(self): + LOGGER.info("Creating Centralized Attack Detector Service - Scalability Experiment 2") + + self.inference_values = [] + self.inference_results = [] + self.cryptomining_detector_path = os.path.join(current_dir, "ml_model/cryptomining_detector/") + self.cryptomining_detector_file_name = os.listdir(self.cryptomining_detector_path)[0] + self.cryptomining_detector_model_path = os.path.join( + self.cryptomining_detector_path, self.cryptomining_detector_file_name + ) + self.cryptomining_detector_model = rt.InferenceSession(self.cryptomining_detector_model_path) + + # Load cryptomining detector features metadata from ONNX file + self.cryptomining_detector_features_metadata = list( + self.cryptomining_detector_model.get_modelmeta().custom_metadata_map.values() + ) + self.cryptomining_detector_features_metadata = [float(x) for x in self.cryptomining_detector_features_metadata] + self.cryptomining_detector_features_metadata.sort() + LOGGER.info("Cryptomining Detector Features: " + str(self.cryptomining_detector_features_metadata)) + + self.input_name = self.cryptomining_detector_model.get_inputs()[0].name + self.label_name = self.cryptomining_detector_model.get_outputs()[0].name + self.prob_name = self.cryptomining_detector_model.get_outputs()[1].name + + # Kpi values + self.l3_security_status = 0 # unnecessary + self.l3_ml_model_confidence = 0 + self.l3_inferences_in_interval_counter = 0 + + self.l3_ml_model_confidence_normal = 0 + self.l3_inferences_in_interval_counter_normal = 0 + + self.l3_ml_model_confidence_crypto = 0 + self.l3_inferences_in_interval_counter_crypto = 0 + + self.l3_attacks = [] + self.l3_unique_attack_conns = 0 + self.l3_unique_compromised_clients = 0 + self.l3_unique_attackers = 0 + + self.l3_non_empty_time_interval = False + + self.monitoring_client = MonitoringClient() + self.service_ids = [] + self.monitored_kpis = { + "l3_security_status": { + "kpi_id": None, + "description": "L3 - Confidence of the cryptomining detector in the security status in the last time interval of the service {service_id}", + "kpi_sample_type": KpiSampleType.KPISAMPLETYPE_L3_SECURITY_STATUS_CRYPTO, + "service_ids": [], + }, + "l3_ml_model_confidence": { + "kpi_id": None, + "description": "L3 - Security status of the service in a time interval of the service {service_id} (“0†if no attack has been detected on the service and “1†if a cryptomining attack has been detected)", + "kpi_sample_type": KpiSampleType.KPISAMPLETYPE_ML_CONFIDENCE, + "service_ids": [], + }, + "l3_unique_attack_conns": { + "kpi_id": None, + "description": "L3 - Number of attack connections detected in a time interval of the service {service_id} (attacks of the same connection [origin IP, origin port, destination IP and destination port] are only considered once)", + "kpi_sample_type": KpiSampleType.KPISAMPLETYPE_L3_UNIQUE_ATTACK_CONNS, + "service_ids": [], + }, + "l3_unique_compromised_clients": { + "kpi_id": None, + "description": "L3 - Number of unique compromised clients of the service in a time interval of the service {service_id} (attacks from the same origin IP are only considered once)", + "kpi_sample_type": KpiSampleType.KPISAMPLETYPE_L3_UNIQUE_COMPROMISED_CLIENTS, + "service_ids": [], + }, + "l3_unique_attackers": { + "kpi_id": None, + "description": "L3 - number of unique attackers of the service in a time interval of the service {service_id} (attacks from the same destination IP are only considered once)", + "kpi_sample_type": KpiSampleType.KPISAMPLETYPE_L3_UNIQUE_ATTACKERS, + "service_ids": [], + }, + } + self.attackmitigator_client = l3_attackmitigatorClient() + + # Environment variables + self.CLASSIFICATION_THRESHOLD = os.getenv("CAD_CLASSIFICATION_THRESHOLD", 0.5) + self.MONITORED_KPIS_TIME_INTERVAL_AGG = os.getenv("MONITORED_KPIS_TIME_INTERVAL_AGG", 60) + + # Constants + self.NORMAL_CLASS = 0 + self.CRYPTO_CLASS = 1 + + self.kpi_test = None + self.time_interval_start = None + self.time_interval_end = None + + # CAD evaluation tests + self.cad_inference_times = [] + self.cad_num_inference_measurements = 100 + + # AM evaluation tests + self.am_notification_times = [] + + # List of attack connections + self.attack_connections = [] + + # Accuracy metrics + self.correct_attack_conns = 0 + self.correct_predictions = 0 + self.attack_connections_len = Value('f', 0) # Must use multiprocessing.Value to share values between processes + self.total_predictions = Value('f', 0) + self.false_positives = Value('f', 0) + self.false_negatives = Value('f', 0) + self.overall_detection_acc = Value('f', 0) + self.cryptomining_attack_detection_acc = Value('f', 0) + self.confidence = Value('f', 0) + + self.f1_score_macro = Value('f', 0) + self.f1_score_weighted = Value('f', 0) + self.balanced_accuracy = Value('f', 0) + self.precision_score = Value('f', 0) + self.recall_score = Value('f', 0) + + self.y_true = [] + self.y_pred = [] + + self.max_connection_time = 60 + self.time_to_stabilize = 5 + + """ + Create a monitored KPI for a specific service and add it to the Monitoring Client + -input: + + service_id: service ID where the KPI will be monitored + + kpi_name: name of the KPI + + kpi_description: description of the KPI + + kpi_sample_type: KPI sample type of the KPI (it must be defined in the kpi_sample_types.proto file) + -output: KPI identifier representing the KPI + """ + + def create_kpi( + self, + service_id, + kpi_name, + kpi_description, + kpi_sample_type, + ): + kpidescriptor = KpiDescriptor() + kpidescriptor.kpi_description = kpi_description + kpidescriptor.service_id.service_uuid.uuid = service_id.service_uuid.uuid + kpidescriptor.kpi_sample_type = kpi_sample_type + new_kpi = self.monitoring_client.SetKpi(kpidescriptor) + + LOGGER.info("Created KPI {}".format(kpi_name)) + + return new_kpi + + """ + Create the monitored KPIs for a specific service, add them to the Monitoring Client and store their identifiers in the monitored_kpis dictionary + -input: + + service_id: service ID where the KPIs will be monitored + -output: None + """ + + def create_kpis(self, service_id, device_id, endpoint_id): + LOGGER.info("Creating KPIs for service {}".format(service_id)) + + # for now, all the KPIs are created for all the services from which requests are received + for kpi in self.monitored_kpis: + # generate random slice_id + slice_id = SliceId() + slice_id.slice_uuid.uuid = str(uuid.uuid4()) + + # generate random connection_id + connection_id = ConnectionId() + connection_id.connection_uuid.uuid = str(uuid.uuid4()) + + created_kpi = self.create_kpi( + service_id, + kpi, + self.monitored_kpis[kpi]["description"].format(service_id=service_id.service_uuid.uuid), + self.monitored_kpis[kpi]["kpi_sample_type"], + ) + self.monitored_kpis[kpi]["kpi_id"] = created_kpi.kpi_id + self.monitored_kpis[kpi]["service_ids"].append(service_id.service_uuid.uuid) + + LOGGER.info("Created KPIs for service {}\n".format(service_id)) + + def monitor_kpis(self): + monitor_inference_results = self.inference_results + monitor_service_ids = self.service_ids + + self.assign_timestamp(monitor_inference_results) + + non_empty_time_interval = self.l3_non_empty_time_interval + + if non_empty_time_interval: + for service_id in monitor_service_ids: + #LOGGER.debug("service_id: {}".format(service_id)) + + self.monitor_compute_l3_kpi(service_id, monitor_inference_results) + + # Demo mode inference results are erased + """if DEMO_MODE: + # Delete fist half of the inference results + LOGGER.debug("inference_results len: {}".format(len(self.inference_results))) + self.inference_results = self.inference_results[len(self.inference_results)//2:] + LOGGER.debug("inference_results len after erase: {}".format(len(self.inference_results)))""" + # end = time.time() + # LOGGER.debug("Time to process inference results with erase: {}".format(end - start)) + LOGGER.debug("KPIs sent to monitoring server\n") + else: + LOGGER.debug("No KPIs sent to monitoring server") + + def assign_timestamp(self, monitor_inference_results): + time_interval = self.MONITORED_KPIS_TIME_INTERVAL_AGG + + # assign the timestamp of the first inference result to the time_interval_start + if self.time_interval_start is None: + self.time_interval_start = monitor_inference_results[0]["timestamp"] + #LOGGER.debug("self.time_interval_start: {}".format(self.time_interval_start)) + + # add time_interval to the current time to get the time interval end + #LOGGER.debug("time_interval: {}".format(time_interval)) + #LOGGER.debug(timedelta(seconds=time_interval)) + self.time_interval_end = self.time_interval_start + timedelta(seconds=time_interval) + + current_time = datetime.utcnow() + + #LOGGER.debug("current_time: {}".format(current_time)) + + if current_time >= self.time_interval_end: + self.time_interval_start = self.time_interval_end + self.time_interval_end = self.time_interval_start + timedelta(seconds=time_interval) + self.l3_security_status = 0 # unnecessary + self.l3_ml_model_confidence = 0 + self.l3_inferences_in_interval_counter = 0 + + self.l3_ml_model_confidence_normal = 0 + self.l3_inferences_in_interval_counter_normal = 0 + + self.l3_ml_model_confidence_crypto = 0 + self.l3_inferences_in_interval_counter_crypto = 0 + + self.l3_attacks = [] + self.l3_unique_attack_conns = 0 + self.l3_unique_compromised_clients = 0 + self.l3_unique_attackers = 0 + + self.l3_non_empty_time_interval = False + + #LOGGER.debug("time_interval_start: {}".format(self.time_interval_start)) + #LOGGER.debug("time_interval_end: {}".format(self.time_interval_end)) + + def monitor_compute_l3_kpi(self, service_id, monitor_inference_results): + # L3 security status + kpi_security_status = Kpi() + kpi_security_status.kpi_id.kpi_id.CopyFrom(self.monitored_kpis["l3_security_status"]["kpi_id"]) + kpi_security_status.kpi_value.int32Val = self.l3_security_status + + # L3 ML model confidence + kpi_conf = Kpi() + kpi_conf.kpi_id.kpi_id.CopyFrom(self.monitored_kpis["l3_ml_model_confidence"]["kpi_id"]) + kpi_conf.kpi_value.floatVal = self.monitor_ml_model_confidence() + + # L3 unique attack connections + kpi_unique_attack_conns = Kpi() + kpi_unique_attack_conns.kpi_id.kpi_id.CopyFrom(self.monitored_kpis["l3_unique_attack_conns"]["kpi_id"]) + kpi_unique_attack_conns.kpi_value.int32Val = self.l3_unique_attack_conns + + # L3 unique compromised clients + kpi_unique_compromised_clients = Kpi() + kpi_unique_compromised_clients.kpi_id.kpi_id.CopyFrom( + self.monitored_kpis["l3_unique_compromised_clients"]["kpi_id"] + ) + kpi_unique_compromised_clients.kpi_value.int32Val = self.l3_unique_compromised_clients + + # L3 unique attackers + kpi_unique_attackers = Kpi() + kpi_unique_attackers.kpi_id.kpi_id.CopyFrom(self.monitored_kpis["l3_unique_attackers"]["kpi_id"]) + kpi_unique_attackers.kpi_value.int32Val = self.l3_unique_attackers + + timestamp = Timestamp() + timestamp.timestamp = timestamp_utcnow_to_float() + + kpi_security_status.timestamp.CopyFrom(timestamp) + kpi_conf.timestamp.CopyFrom(timestamp) + kpi_unique_attack_conns.timestamp.CopyFrom(timestamp) + kpi_unique_compromised_clients.timestamp.CopyFrom(timestamp) + kpi_unique_attackers.timestamp.CopyFrom(timestamp) + + LOGGER.debug("Sending KPIs to monitoring server") + + '''LOGGER.debug("kpi_security_status: {}".format(kpi_security_status)) + LOGGER.debug("kpi_conf: {}".format(kpi_conf)) + LOGGER.debug("kpi_unique_attack_conns: {}".format(kpi_unique_attack_conns)) + LOGGER.debug("kpi_unique_compromised_clients: {}".format(kpi_unique_compromised_clients)) + LOGGER.debug("kpi_unique_attackers: {}".format(kpi_unique_attackers))''' + + try: + self.monitoring_client.IncludeKpi(kpi_security_status) + self.monitoring_client.IncludeKpi(kpi_conf) + self.monitoring_client.IncludeKpi(kpi_unique_attack_conns) + self.monitoring_client.IncludeKpi(kpi_unique_compromised_clients) + self.monitoring_client.IncludeKpi(kpi_unique_attackers) + except Exception as e: + LOGGER.debug("Error sending KPIs to monitoring server: {}".format(e)) + + def monitor_ml_model_confidence(self): + if self.l3_security_status == 0: + return self.l3_ml_model_confidence_normal + + return self.l3_ml_model_confidence_crypto + + """ + Classify connection as standard traffic or cryptomining attack and return results + -input: + + request: L3CentralizedattackdetectorMetrics object with connection features information + -output: L3AttackmitigatorOutput object with information about the assigned class and prediction confidence + """ + + def perform_inference(self, request): + x_data = np.array([[feature.feature for feature in request.features]]) + + # Print input data shape + #LOGGER.debug("x_data.shape: {}".format(x_data.shape)) + + # Get batch size + batch_size = x_data.shape[0] + + # Print batch size + #LOGGER.debug("batch_size: {}".format(batch_size)) + #LOGGER.debug("x_data.shape: {}".format(x_data.shape)) + + inference_time_start = time.perf_counter() + + # Perform inference + predictions = self.cryptomining_detector_model.run( + [self.prob_name], {self.input_name: x_data.astype(np.float32)} + )[0] + + inference_time_end = time.perf_counter() + + # Measure inference time + inference_time = inference_time_end - inference_time_start + self.cad_inference_times.append(inference_time) + + if len(self.cad_inference_times) > self.cad_num_inference_measurements: + inference_times_np_array = np.array(self.cad_inference_times) + np.save(f"inference_times_{batch_size}.npy", inference_times_np_array) + + avg_inference_time = np.mean(inference_times_np_array) + max_inference_time = np.max(inference_times_np_array) + min_inference_time = np.min(inference_times_np_array) + std_inference_time = np.std(inference_times_np_array) + median_inference_time = np.median(inference_times_np_array) + + '''LOGGER.debug("Average inference time: {}".format(avg_inference_time)) + LOGGER.debug("Max inference time: {}".format(max_inference_time)) + LOGGER.debug("Min inference time: {}".format(min_inference_time)) + LOGGER.debug("Standard deviation inference time: {}".format(std_inference_time)) + LOGGER.debug("Median inference time: {}".format(median_inference_time))''' + + with open(f"inference_times_stats_{batch_size}.txt", "w") as f: + f.write("Average inference time: {}\n".format(avg_inference_time)) + f.write("Max inference time: {}\n".format(max_inference_time)) + f.write("Min inference time: {}\n".format(min_inference_time)) + f.write("Standard deviation inference time: {}\n".format(std_inference_time)) + f.write("Median inference time: {}\n".format(median_inference_time)) + + # Gather the predicted class, the probability of that class and other relevant information required to block the attack + output_message = { + "confidence": None, + "timestamp": datetime.now().strftime("%d/%m/%Y %H:%M:%S"), + "ip_o": request.connection_metadata.ip_o, + "ip_d": request.connection_metadata.ip_d, + "tag_name": None, + "tag": None, + "flow_id": request.connection_metadata.flow_id, + "protocol": request.connection_metadata.protocol, + "port_o": request.connection_metadata.port_o, + "port_d": request.connection_metadata.port_d, + "ml_id": self.cryptomining_detector_file_name, + "service_id": request.connection_metadata.service_id, + "endpoint_id": request.connection_metadata.endpoint_id, + "time_start": request.connection_metadata.time_start, + "time_end": request.connection_metadata.time_end, + } + + if predictions[0][1] >= self.CLASSIFICATION_THRESHOLD: + output_message["confidence"] = predictions[0][1] + output_message["tag_name"] = "Crypto" + output_message["tag"] = self.CRYPTO_CLASS + else: + output_message["confidence"] = predictions[0][0] + output_message["tag_name"] = "Normal" + output_message["tag"] = self.NORMAL_CLASS + + return output_message + + """ + Receive features from Attack Mitigator, predict attack and communicate with Attack Mitigator + -input: + + request: L3CentralizedattackdetectorMetrics object with connection features information + -output: Empty object with a message about the execution of the function + """ + @safe_and_metered_rpc_method(METRICS_POOL, LOGGER) + def AnalyzeConnectionStatistics(self, request, context): + # Perform inference with the data sent in the request + logging.info("\nPerforming inference...") + + inference_time_start = time.time() + cryptomining_detector_output = self.perform_inference(request) + inference_time_end = time.time() + + LOGGER.debug("Inference performed in {} seconds".format(inference_time_end - inference_time_start)) + logging.info("Inference performed correctly\n") + + self.inference_results.append({"output": cryptomining_detector_output, "timestamp": datetime.now()}) + #LOGGER.debug("inference_results length: {}".format(len(self.inference_results))) + + service_id = request.connection_metadata.service_id + device_id = request.connection_metadata.endpoint_id.device_id + endpoint_id = request.connection_metadata.endpoint_id + + # Check if a request of a new service has been received and, if so, create the monitored KPIs for that service + if service_id not in self.service_ids: + self.create_kpis(service_id, device_id, endpoint_id) + self.service_ids.append(service_id) + + monitor_kpis_start = time.time() + self.monitor_kpis() + monitor_kpis_end = time.time() + + '''LOGGER.debug("Monitoring KPIs performed in {} seconds".format(monitor_kpis_end - monitor_kpis_start)) + LOGGER.debug("cryptomining_detector_output: {}".format(cryptomining_detector_output))''' + + if DEMO_MODE: + self.confidence.value = cryptomining_detector_output["confidence"] + self.analyze_prediction_accuracy() + + connection_info = ConnectionInfo( + request.connection_metadata.ip_o, + request.connection_metadata.port_o, + request.connection_metadata.ip_d, + request.connection_metadata.port_d, + ) + + self.l3_non_empty_time_interval = True + + if cryptomining_detector_output["tag_name"] == "Crypto": + self.l3_security_status = 1 + + self.l3_inferences_in_interval_counter_crypto += 1 + self.l3_ml_model_confidence_crypto = ( + self.l3_ml_model_confidence_crypto * (self.l3_inferences_in_interval_counter_crypto - 1) + + cryptomining_detector_output["confidence"] + ) / self.l3_inferences_in_interval_counter_crypto + + if connection_info not in self.l3_attacks: + self.l3_attacks.append(connection_info) + self.l3_unique_attack_conns += 1 + + self.l3_unique_compromised_clients = len(set([conn.ip_o for conn in self.l3_attacks])) + self.l3_unique_attackers = len(set([conn.ip_d for conn in self.l3_attacks])) + + else: + self.l3_inferences_in_interval_counter_normal += 1 + self.l3_ml_model_confidence_normal = ( + self.l3_ml_model_confidence_normal * (self.l3_inferences_in_interval_counter_normal - 1) + + cryptomining_detector_output["confidence"] + ) / self.l3_inferences_in_interval_counter_normal + + # Only notify Attack Mitigator when a cryptomining connection has been detected + if cryptomining_detector_output["tag_name"] == "Crypto" and connection_info not in self.attack_connections: + self.attack_connections.append(connection_info) + + # Calculate F1 score + self.y_pred.append(1) + + if connection_info.ip_o in ATTACK_IPS or connection_info.ip_d in ATTACK_IPS: + self.correct_attack_conns += 1 + self.correct_predictions += 1 + self.y_true.append(1) + else: + #LOGGER.debug("False positive: {}".format(connection_info)) + self.false_positives.value = self.false_positives.value + 1 + self.y_true.append(0) + + self.total_predictions.value = self.total_predictions.value + 1 + + # if False: + notification_time_start = time.perf_counter() + + LOGGER.debug("Crypto attack detected") + + # Notify the Attack Mitigator component about the attack + logging.info( + "Notifying the Attack Mitigator component about the attack in order to block the connection..." + ) + + try: + logging.info("Sending the connection information to the Attack Mitigator component...") + message = L3AttackmitigatorOutput(**cryptomining_detector_output) + response = self.attackmitigator_client.PerformMitigation(message) + notification_time_end = time.perf_counter() + + self.am_notification_times.append(notification_time_end - notification_time_start) + + #LOGGER.debug(f"am_notification_times length: {len(self.am_notification_times)}") + #LOGGER.debug(f"last am_notification_time: {self.am_notification_times[-1]}") + + if len(self.am_notification_times) > 100: + am_notification_times_np_array = np.array(self.am_notification_times) + np.save("am_notification_times.npy", am_notification_times_np_array) + + avg_notification_time = np.mean(am_notification_times_np_array) + max_notification_time = np.max(am_notification_times_np_array) + min_notification_time = np.min(am_notification_times_np_array) + std_notification_time = np.std(am_notification_times_np_array) + median_notification_time = np.median(am_notification_times_np_array) + + '''LOGGER.debug("Average notification time: {}".format(avg_notification_time)) + LOGGER.debug("Max notification time: {}".format(max_notification_time)) + LOGGER.debug("Min notification time: {}".format(min_notification_time)) + LOGGER.debug("Std notification time: {}".format(std_notification_time)) + LOGGER.debug("Median notification time: {}".format(median_notification_time))''' + + with open("am_notification_times_stats.txt", "w") as f: + f.write("Average notification time: {}\n".format(avg_notification_time)) + f.write("Max notification time: {}\n".format(max_notification_time)) + f.write("Min notification time: {}\n".format(min_notification_time)) + f.write("Std notification time: {}\n".format(std_notification_time)) + f.write("Median notification time: {}\n".format(median_notification_time)) + + # logging.info("Attack Mitigator notified and received response: ", response.message) # FIX No message received + logging.info("Attack Mitigator notified\n") + + return Empty(message="OK, information received and mitigator notified abou the attack") + except Exception as e: + logging.error("Error notifying the Attack Mitigator component about the attack: ", e) + logging.error("Couldn't find l3_attackmitigator\n") + + return Empty(message="Attack Mitigator not found") + else: + logging.info("No attack detected") + + if cryptomining_detector_output["tag_name"] != "Crypto": + self.y_pred.append(0) + if connection_info.ip_o not in ATTACK_IPS and connection_info.ip_d not in ATTACK_IPS: + self.correct_predictions += 1 + self.y_true.append(0) + else: + #LOGGER.debug("False negative: {}".format(connection_info)) + self.false_negatives.value = self.false_negatives.value + 1 + self.y_true.append(1) + + self.total_predictions.value = self.total_predictions.value + 1 + + return Empty(message="Ok, information received (no attack detected)") + + def analyze_prediction_accuracy(self): + #LOGGER.info("Number of Attack Connections Correctly Classified: {}".format(self.correct_attack_conns)) + #LOGGER.info("Number of Attack Connections: {}".format(len(self.attack_connections))) + + if self.total_predictions.value > 0: + self.overall_detection_acc.value = self.correct_predictions / self.total_predictions.value + else: + self.overall_detection_acc.value = 0 + + #LOGGER.info("Overall Detection Accuracy: {}\n".format(self.overall_detection_acc.value)) + + if len(self.attack_connections) > 0: + self.cryptomining_attack_detection_acc.value = self.correct_attack_conns / len(self.attack_connections) + else: + self.cryptomining_attack_detection_acc.value = 0 + + #LOGGER.info("Cryptomining Attack Detection Accuracy: {}".format(self.cryptomining_attack_detection_acc.value)) + #LOGGER.info("Cryptomining Detector Confidence: {}".format(self.confidence.value)) + + #LOGGER.info("Time elapsed: {}".format(time.time() - TIME_START)) + + self.attack_connections_len.value = len(self.attack_connections) + + self.f1_score_macro.value = metrics.f1_score(self.y_true, self.y_pred, average="macro") + self.f1_score_weighted.value = metrics.f1_score(self.y_true, self.y_pred, average="weighted") + self.balanced_accuracy.value = metrics.balanced_accuracy_score(self.y_true, self.y_pred) + self.precision_score.value = metrics.precision_score(self.y_true, self.y_pred, average="macro") + self.recall_score.value = metrics.recall_score(self.y_true, self.y_pred, average="macro") + + with open("prediction_accuracy.txt", "a") as f: + #LOGGER.debug("Exporting prediction accuracy and confidence") + + f.write("Overall Detection Accuracy: {}\n".format(self.overall_detection_acc.value)) + f.write("Cryptomining Attack Detection Accuracy: {}\n".format(self.cryptomining_attack_detection_acc.value)) + f.write("Total Predictions: {}\n".format(self.total_predictions.value)) + f.write("Total Positives: {}\n".format(len(self.attack_connections))) + f.write("False Positives: {}\n".format(self.false_positives.value)) + f.write("True Negatives: {}\n".format(self.total_predictions.value - len(self.attack_connections))) + f.write("False Negatives: {}\n".format(self.false_negatives.value)) + f.write("Cryptomining Detector Confidence: {}\n\n".format(self.confidence.value)) + f.write("Timestamp: {}\n".format(datetime.now().strftime("%d/%m/%Y %H:%M:%S"))) + f.close() + + def generate_accuracy_scalability_csv(self): + LOGGER.debug("Starting async prediction accuracy analysis") + LOGGER.debug("Correct csv load: {}".format(os.path.exists("/var/teraflow/scalability_accuracy.csv"))) + + timestamp_start = datetime.now().strftime("%d/%m/%Y-%H:%M:%S") + + # Wait for the system to stabilize + time.sleep(self.time_to_stabilize * 60) + + np.save("y_true_max_conn_{}_time_to_stabilize_{}_exp2.npy".format(self.max_connection_time, self.time_to_stabilize), self.y_true) + np.save("y_pred_max_conn_{}_time_to_stabilize_{}_exp2.npy".format(self.max_connection_time, self.time_to_stabilize), self.y_pred) + + LOGGER.debug("Scalability csv started for Exp 2\n") + with open("/var/teraflow/scalability_accuracy.csv", 'a', newline='') as f: + spamwriter = csv.writer(f, delimiter=' ', quotechar='|', quoting=csv.QUOTE_MINIMAL) + '''spamwriter.writerow(['TIME_CONS', 'OVERALL_ACCURACY', 'F1_SCORE_MACRO', 'F1_SCORE_WEIGHTED', + 'BALANCED_ACCURACY', 'PRECISION_SCORE', 'RECALL_SCORE','OVERALL_ACCURACY' + 'CRYPTO_ACCURACY', 'TOTAL_PREDICTIONS', 'TOTAL_POSITIVES', 'F_POSITIVES', + 'T_NEGATIVES', 'F_NEGATIVES', 'CONFIDENCE', 'TIMESTAMP_START', 'TIMESTAMP_FINISH', 'TIME_TO_STABILIZE'])''' + + spamwriter.writerow([self.max_connection_time, self.f1_score_macro.value, self.f1_score_weighted.value, + self.balanced_accuracy.value, self.precision_score.value, self.recall_score.value, + self.overall_detection_acc.value, self.cryptomining_attack_detection_acc.value, + self.total_predictions.value, self.attack_connections_len.value, self.false_positives.value, + self.total_predictions.value - self.attack_connections_len.value, self.false_negatives.value, + self.confidence.value, timestamp_start, datetime.now().strftime("%d/%m/%Y-%H:%M:%S"), self.time_to_stabilize]) + + f.close() + + @safe_and_metered_rpc_method(METRICS_POOL, LOGGER) + def GetScalabilityConfig(self, request, context): + LOGGER.info("Received scalability config request for Exp 2") + + self.max_connection_time = request.max_connection_time + self.time_to_stabilize = request.time_to_stabilize + + # Start process to generate accuracy scalability csv asynchronically + p = Process(target=self.generate_accuracy_scalability_csv) + p.start() + + return Empty(message="CSV generated") + + def AnalyzeBatchConnectionStatistics(self, request, context): + batch_time_start = time.time() + + for metric in request.metrics: + self.AnalyzeConnectionStatistics(metric, context) + + batch_time_end = time.time() + + with open("batch_time.txt", "a") as f: + f.write(str(len(request.metrics)) + "\n") + f.write(str(batch_time_end - batch_time_start) + "\n\n") + f.close() + + #logging.debug("Metrics: " + str(len(request.metrics))) + #logging.debug("Batch time: " + str(batch_time_end - batch_time_start)) + + return Empty(message="OK, information received.") + + """ + Send features allocated in the metadata of the onnx file to the DAD + -output: ONNX metadata as a list of integers + """ + @safe_and_metered_rpc_method(METRICS_POOL, LOGGER) + def GetFeaturesIds(self, request: Empty, context): + features = AutoFeatures() + + for feature in self.cryptomining_detector_features_metadata: + features.auto_features.append(feature) + + return features diff --git a/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py b/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py index 36f170dbc71a52a59c9ce9ca9509a2ade67cb8ba..4ca89d882a0dd2278ff6e99896d3e05052b0b44d 100644 --- a/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py +++ b/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py @@ -45,6 +45,9 @@ from l3_attackmitigator.client.l3_attackmitigatorClient import l3_attackmitigato import uuid +import sklearn.metrics as metrics +import numpy as np + from common.method_wrappers.Decorator import MetricsPool, safe_and_metered_rpc_method LOGGER = logging.getLogger(__name__) @@ -53,8 +56,8 @@ current_dir = os.path.dirname(os.path.abspath(__file__)) # Demo constants DEMO_MODE = True ATTACK_IPS = ["37.187.95.110", "91.121.140.167", "94.23.23.52", "94.23.247.226", "149.202.83.171"] +BATCH_SIZE= 10 TIME_START = time.time() - METRICS_POOL = MetricsPool('l3_centralizedattackdetector', 'RPC') class SamplingMode(Enum): @@ -88,7 +91,7 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto """ def __init__(self): - LOGGER.info("Creating Centralized Attack Detector Service") + LOGGER.info("Creating Centralized Attack Detector Service - Scalability Experiment 3") self.inference_values = [] self.inference_results = [] @@ -128,6 +131,8 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto self.l3_unique_attackers = 0 self.l3_non_empty_time_interval = False + + self.active_requests = [] self.monitoring_client = MonitoringClient() self.service_ids = [] @@ -186,6 +191,8 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto # List of attack connections self.attack_connections = [] + + self.replica_uuid = uuid.uuid4() # Accuracy metrics self.correct_attack_conns = 0 @@ -197,11 +204,20 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto self.overall_detection_acc = Value('f', 0) self.cryptomining_attack_detection_acc = Value('f', 0) self.confidence = Value('f', 0) - self.calculated_csv = False + + # sklearn metrics + self.f1_score_macro = Value('f', 0) + self.f1_score_weighted = Value('f', 0) + self.balanced_accuracy = Value('f', 0) + self.precision_score = Value('f', 0) + self.recall_score = Value('f', 0) + + self.y_true = [] + self.y_pred = [] self.time_to_stabilize = 2 self.sampling_rate = 0.8 - self.sampling_interval = 0.2 + self.sampling_snapshots = 100 self.sampling_mode = "Random" """ @@ -272,7 +288,7 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto if non_empty_time_interval: for service_id in monitor_service_ids: - LOGGER.debug("service_id: {}".format(service_id)) + #LOGGER.debug("service_id: {}".format(service_id)) self.monitor_compute_l3_kpi(service_id, monitor_inference_results) @@ -284,7 +300,7 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto LOGGER.debug("inference_results len after erase: {}".format(len(self.inference_results)))""" # end = time.time() # LOGGER.debug("Time to process inference results with erase: {}".format(end - start)) - LOGGER.debug("KPIs sent to monitoring server") + LOGGER.debug("KPIs sent to monitoring server\n") else: LOGGER.debug("No KPIs sent to monitoring server") @@ -367,11 +383,11 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto LOGGER.debug("Sending KPIs to monitoring server") - LOGGER.debug("kpi_security_status: {}".format(kpi_security_status)) + '''LOGGER.debug("kpi_security_status: {}".format(kpi_security_status)) LOGGER.debug("kpi_conf: {}".format(kpi_conf)) LOGGER.debug("kpi_unique_attack_conns: {}".format(kpi_unique_attack_conns)) LOGGER.debug("kpi_unique_compromised_clients: {}".format(kpi_unique_compromised_clients)) - LOGGER.debug("kpi_unique_attackers: {}".format(kpi_unique_attackers)) + LOGGER.debug("kpi_unique_attackers: {}".format(kpi_unique_attackers))''' try: self.monitoring_client.IncludeKpi(kpi_security_status) @@ -395,17 +411,17 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto -output: L3AttackmitigatorOutput object with information about the assigned class and prediction confidence """ - def perform_inference(self, request): - x_data = np.array([[feature.feature for feature in request.features]]) + def perform_distributed_inference(self, requests): + batch_size = len(requests) - # Print input data shape - LOGGER.debug("x_data.shape: {}".format(x_data.shape)) + # Create an empty array to hold the input data + x_data = np.empty((batch_size, len(requests[0].features))) - # Get batch size - batch_size = x_data.shape[0] + # Fill in the input data array with features from each request + for i, request in enumerate(requests): + x_data[i] = [feature.feature for feature in request.features] - # Print batch size - LOGGER.debug("batch_size: {}".format(batch_size)) + # Print input data shape LOGGER.debug("x_data.shape: {}".format(x_data.shape)) inference_time_start = time.perf_counter() @@ -445,34 +461,36 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto f.write("Median inference time: {}\n".format(median_inference_time)) # Gather the predicted class, the probability of that class and other relevant information required to block the attack - output_message = { - "confidence": None, - "timestamp": datetime.now().strftime("%d/%m/%Y %H:%M:%S"), - "ip_o": request.connection_metadata.ip_o, - "ip_d": request.connection_metadata.ip_d, - "tag_name": None, - "tag": None, - "flow_id": request.connection_metadata.flow_id, - "protocol": request.connection_metadata.protocol, - "port_o": request.connection_metadata.port_o, - "port_d": request.connection_metadata.port_d, - "ml_id": self.cryptomining_detector_file_name, - "service_id": request.connection_metadata.service_id, - "endpoint_id": request.connection_metadata.endpoint_id, - "time_start": request.connection_metadata.time_start, - "time_end": request.connection_metadata.time_end, - } - - if predictions[0][1] >= self.CLASSIFICATION_THRESHOLD: - output_message["confidence"] = predictions[0][1] - output_message["tag_name"] = "Crypto" - output_message["tag"] = self.CRYPTO_CLASS - else: - output_message["confidence"] = predictions[0][0] - output_message["tag_name"] = "Normal" - output_message["tag"] = self.NORMAL_CLASS + output_messages = [] + for i, request in enumerate(requests): + output_messages.append({ + "confidence": None, + "timestamp": datetime.now().strftime("%d/%m/%Y %H:%M:%S"), + "ip_o": request.connection_metadata.ip_o, + "ip_d": request.connection_metadata.ip_d, + "tag_name": None, + "tag": None, + "flow_id": request.connection_metadata.flow_id, + "protocol": request.connection_metadata.protocol, + "port_o": request.connection_metadata.port_o, + "port_d": request.connection_metadata.port_d, + "ml_id": self.cryptomining_detector_file_name, + "service_id": request.connection_metadata.service_id, + "endpoint_id": request.connection_metadata.endpoint_id, + "time_start": request.connection_metadata.time_start, + "time_end": request.connection_metadata.time_end, + }) + + if predictions[i][1] >= self.CLASSIFICATION_THRESHOLD: + output_messages[i]["confidence"] = predictions[i][1] + output_messages[i]["tag_name"] = "Crypto" + output_messages[i]["tag"] = self.CRYPTO_CLASS + else: + output_messages[i]["confidence"] = predictions[i][0] + output_messages[i]["tag_name"] = "Normal" + output_messages[i]["tag"] = self.NORMAL_CLASS - return output_message + return output_messages """ Receive features from Attack Mitigator, predict attack and communicate with Attack Mitigator @@ -483,175 +501,208 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto @safe_and_metered_rpc_method(METRICS_POOL, LOGGER) def AnalyzeConnectionStatistics(self, request, context): # Perform inference with the data sent in the request - logging.info("Performing inference...") + self.active_requests.append(request) - inference_time_start = time.time() - cryptomining_detector_output = self.perform_inference(request) - inference_time_end = time.time() + if len(self.active_requests) == BATCH_SIZE: + csv_file_path = 'hola_mundo.csv' - LOGGER.debug("Inference performed in {} seconds".format(inference_time_end - inference_time_start)) - logging.info("Inference performed correctly") - - self.inference_results.append({"output": cryptomining_detector_output, "timestamp": datetime.now()}) - LOGGER.debug("inference_results length: {}".format(len(self.inference_results))) - - service_id = request.connection_metadata.service_id - device_id = request.connection_metadata.endpoint_id.device_id - endpoint_id = request.connection_metadata.endpoint_id - - # Check if a request of a new service has been received and, if so, create the monitored KPIs for that service - if service_id not in self.service_ids: - self.create_kpis(service_id, device_id, endpoint_id) - self.service_ids.append(service_id) - - monitor_kpis_start = time.time() - self.monitor_kpis() - monitor_kpis_end = time.time() - - LOGGER.debug("Monitoring KPIs performed in {} seconds".format(monitor_kpis_end - monitor_kpis_start)) - LOGGER.debug("cryptomining_detector_output: {}".format(cryptomining_detector_output)) + col_values = [1, 2, 3] + + with open(csv_file_path, 'a', newline='') as file: + writer = csv.writer(file) + writer.writerow(col_values) + + logging.debug("Performing inference... {}".format(self.replica_uuid)) + + inference_time_start = time.time() + cryptomining_detector_output = self.perform_distributed_inference(self.active_requests) + inference_time_end = time.time() + + LOGGER.debug("Inference performed in {} seconds".format(inference_time_end - inference_time_start)) + logging.info("Inference performed correctly") - if DEMO_MODE: - self.confidence.value = cryptomining_detector_output["confidence"] - self.analyze_prediction_accuracy() + self.inference_results.append({"output": cryptomining_detector_output, "timestamp": datetime.now()}) + LOGGER.debug("inference_results length: {}".format(len(self.inference_results))) - connection_info = ConnectionInfo( - request.connection_metadata.ip_o, - request.connection_metadata.port_o, - request.connection_metadata.ip_d, - request.connection_metadata.port_d, - ) + for i, req in enumerate(self.active_requests): + service_id = req.connection_metadata.service_id + device_id = req.connection_metadata.endpoint_id.device_id + endpoint_id = req.connection_metadata.endpoint_id - self.l3_non_empty_time_interval = True + # Check if a request of a new service has been received and, if so, create the monitored KPIs for that service + if service_id not in self.service_ids: + self.create_kpis(service_id, device_id, endpoint_id) + self.service_ids.append(service_id) - if cryptomining_detector_output["tag_name"] == "Crypto": - self.l3_security_status = 1 + monitor_kpis_start = time.time() + self.monitor_kpis() + monitor_kpis_end = time.time() - self.l3_inferences_in_interval_counter_crypto += 1 - self.l3_ml_model_confidence_crypto = ( - self.l3_ml_model_confidence_crypto * (self.l3_inferences_in_interval_counter_crypto - 1) - + cryptomining_detector_output["confidence"] - ) / self.l3_inferences_in_interval_counter_crypto + LOGGER.debug("Monitoring KPIs performed in {} seconds".format(monitor_kpis_end - monitor_kpis_start)) + LOGGER.debug("cryptomining_detector_output: {}".format(cryptomining_detector_output[i])) - if connection_info not in self.l3_attacks: - self.l3_attacks.append(connection_info) - self.l3_unique_attack_conns += 1 + if DEMO_MODE: + self.confidence.value = cryptomining_detector_output[i]["confidence"] + self.analyze_prediction_accuracy() - self.l3_unique_compromised_clients = len(set([conn.ip_o for conn in self.l3_attacks])) - self.l3_unique_attackers = len(set([conn.ip_d for conn in self.l3_attacks])) + connection_info = ConnectionInfo( + req.connection_metadata.ip_o, + req.connection_metadata.port_o, + req.connection_metadata.ip_d, + req.connection_metadata.port_d, + ) - else: - self.l3_inferences_in_interval_counter_normal += 1 - self.l3_ml_model_confidence_normal = ( - self.l3_ml_model_confidence_normal * (self.l3_inferences_in_interval_counter_normal - 1) - + cryptomining_detector_output["confidence"] - ) / self.l3_inferences_in_interval_counter_normal - - # Only notify Attack Mitigator when a cryptomining connection has been detected - if cryptomining_detector_output["tag_name"] == "Crypto" and connection_info not in self.attack_connections: - self.attack_connections.append(connection_info) - - if connection_info.ip_o in ATTACK_IPS or connection_info.ip_d in ATTACK_IPS: - self.correct_attack_conns += 1 - self.correct_predictions += 1 - else: - LOGGER.debug("False positive: {}".format(connection_info)) - self.false_positives.value = self.false_positives.value + 1 + self.l3_non_empty_time_interval = True - self.total_predictions.value = self.total_predictions.value + 1 + if cryptomining_detector_output[i]["tag_name"] == "Crypto": + self.l3_security_status = 1 - # if False: - notification_time_start = time.perf_counter() + self.l3_inferences_in_interval_counter_crypto += 1 + self.l3_ml_model_confidence_crypto = ( + self.l3_ml_model_confidence_crypto * (self.l3_inferences_in_interval_counter_crypto - 1) + + cryptomining_detector_output[i]["confidence"] + ) / self.l3_inferences_in_interval_counter_crypto - LOGGER.debug("Crypto attack detected") - - # Notify the Attack Mitigator component about the attack - logging.info( - "Notifying the Attack Mitigator component about the attack in order to block the connection..." - ) + if connection_info not in self.l3_attacks: + self.l3_attacks.append(connection_info) + self.l3_unique_attack_conns += 1 - try: - logging.info("Sending the connection information to the Attack Mitigator component...") - message = L3AttackmitigatorOutput(**cryptomining_detector_output) - response = self.attackmitigator_client.PerformMitigation(message) - notification_time_end = time.perf_counter() - - self.am_notification_times.append(notification_time_end - notification_time_start) - - LOGGER.debug(f"am_notification_times length: {len(self.am_notification_times)}") - LOGGER.debug(f"last am_notification_time: {self.am_notification_times[-1]}") - - if len(self.am_notification_times) > 100: - am_notification_times_np_array = np.array(self.am_notification_times) - np.save("am_notification_times.npy", am_notification_times_np_array) - - avg_notification_time = np.mean(am_notification_times_np_array) - max_notification_time = np.max(am_notification_times_np_array) - min_notification_time = np.min(am_notification_times_np_array) - std_notification_time = np.std(am_notification_times_np_array) - median_notification_time = np.median(am_notification_times_np_array) - - LOGGER.debug("Average notification time: {}".format(avg_notification_time)) - LOGGER.debug("Max notification time: {}".format(max_notification_time)) - LOGGER.debug("Min notification time: {}".format(min_notification_time)) - LOGGER.debug("Std notification time: {}".format(std_notification_time)) - LOGGER.debug("Median notification time: {}".format(median_notification_time)) - - with open("am_notification_times_stats.txt", "w") as f: - f.write("Average notification time: {}\n".format(avg_notification_time)) - f.write("Max notification time: {}\n".format(max_notification_time)) - f.write("Min notification time: {}\n".format(min_notification_time)) - f.write("Std notification time: {}\n".format(std_notification_time)) - f.write("Median notification time: {}\n".format(median_notification_time)) - - # logging.info("Attack Mitigator notified and received response: ", response.message) # FIX No message received - logging.info("Attack Mitigator notified") - - return Empty(message="OK, information received and mitigator notified abou the attack") - except Exception as e: - logging.error("Error notifying the Attack Mitigator component about the attack: ", e) - logging.error("Couldn't find l3_attackmitigator") - - return Empty(message="Attack Mitigator not found") - else: - logging.info("No attack detected") + self.l3_unique_compromised_clients = len(set([conn.ip_o for conn in self.l3_attacks])) + self.l3_unique_attackers = len(set([conn.ip_d for conn in self.l3_attacks])) - if cryptomining_detector_output["tag_name"] != "Crypto": - if connection_info.ip_o not in ATTACK_IPS and connection_info.ip_d not in ATTACK_IPS: - self.correct_predictions += 1 else: - LOGGER.debug("False negative: {}".format(connection_info)) - self.false_negatives.value = self.false_negatives.value + 1 + self.l3_inferences_in_interval_counter_normal += 1 + self.l3_ml_model_confidence_normal = ( + self.l3_ml_model_confidence_normal * (self.l3_inferences_in_interval_counter_normal - 1) + + cryptomining_detector_output[i]["confidence"] + ) / self.l3_inferences_in_interval_counter_normal + + # Only notify Attack Mitigator when a cryptomining connection has been detected + if cryptomining_detector_output[i]["tag_name"] == "Crypto": + if DEMO_MODE: + self.attack_connections.append(connection_info) + + # Calculate F1 score + self.y_pred.append(1) + + if connection_info.ip_o in ATTACK_IPS or connection_info.ip_d in ATTACK_IPS: + self.correct_attack_conns += 1 + self.correct_predictions += 1 + self.y_true.append(1) + else: + LOGGER.debug("False positive: {}".format(connection_info)) + self.false_positives.value = self.false_positives.value + 1 + self.y_true.append(0) + + self.total_predictions.value = self.total_predictions.value + 1 + + # if False: + notification_time_start = time.perf_counter() + + LOGGER.debug("Crypto attack detected") + + # Notify the Attack Mitigator component about the attack + logging.info( + "Notifying the Attack Mitigator component about the attack in order to block the connection..." + ) + + try: + logging.info("Sending the connection information to the Attack Mitigator component...") + message = L3AttackmitigatorOutput(**cryptomining_detector_output[i]) + response = self.attackmitigator_client.PerformMitigation(message) + notification_time_end = time.perf_counter() + + self.am_notification_times.append(notification_time_end - notification_time_start) + + LOGGER.debug(f"am_notification_times length: {len(self.am_notification_times)}") + LOGGER.debug(f"last am_notification_time: {self.am_notification_times[-1]}") + + if len(self.am_notification_times) > 100: + am_notification_times_np_array = np.array(self.am_notification_times) + np.save("am_notification_times.npy", am_notification_times_np_array) + + avg_notification_time = np.mean(am_notification_times_np_array) + max_notification_time = np.max(am_notification_times_np_array) + min_notification_time = np.min(am_notification_times_np_array) + std_notification_time = np.std(am_notification_times_np_array) + median_notification_time = np.median(am_notification_times_np_array) + + LOGGER.debug("Average notification time: {}".format(avg_notification_time)) + LOGGER.debug("Max notification time: {}".format(max_notification_time)) + LOGGER.debug("Min notification time: {}".format(min_notification_time)) + LOGGER.debug("Std notification time: {}".format(std_notification_time)) + LOGGER.debug("Median notification time: {}".format(median_notification_time)) + + with open("am_notification_times_stats.txt", "w") as f: + f.write("Average notification time: {}\n".format(avg_notification_time)) + f.write("Max notification time: {}\n".format(max_notification_time)) + f.write("Min notification time: {}\n".format(min_notification_time)) + f.write("Std notification time: {}\n".format(std_notification_time)) + f.write("Median notification time: {}\n".format(median_notification_time)) + + # logging.info("Attack Mitigator notified and received response: ", response.message) # FIX No message received + logging.info("Attack Mitigator notified") + + #return Empty(message="OK, information received and mitigator notified abou the attack") + + except Exception as e: + logging.error("Error notifying the Attack Mitigator component about the attack: ", e) + logging.error("Couldn't find l3_attackmitigator") + + return Empty(message="Attack Mitigator not found") + else: + logging.info("No attack detected") + + if cryptomining_detector_output[i]["tag_name"] != "Crypto": + self.y_pred.append(0) + if connection_info.ip_o not in ATTACK_IPS and connection_info.ip_d not in ATTACK_IPS: + self.correct_predictions += 1 + self.y_true.append(0) + else: + LOGGER.debug("False negative: {}".format(connection_info)) + self.false_negatives.value = self.false_negatives.value + 1 + self.y_true.append(1) - self.total_predictions.value = self.total_predictions.value + 1 + self.total_predictions.value = self.total_predictions.value + 1 - return Empty(message="Ok, information received (no attack detected)") + # return Empty(message="Ok, information received (no attack detected)") + + self.active_requests = [] + return Empty(message="Ok, metrics processed") + + return Empty(message="Ok, information received") def analyze_prediction_accuracy(self): - LOGGER.info("Number of Attack Connections Correctly Classified: {}".format(self.correct_attack_conns)) - LOGGER.info("Number of Attack Connections: {}".format(len(self.attack_connections))) + #LOGGER.info("Number of Attack Connections Correctly Classified: {}".format(self.correct_attack_conns)) + #LOGGER.info("Number of Attack Connections: {}".format(len(self.attack_connections))) if self.total_predictions.value > 0: self.overall_detection_acc.value = self.correct_predictions / self.total_predictions.value else: self.overall_detection_acc.value = 0 - LOGGER.info("Overall Detection Accuracy: {}\n".format(self.overall_detection_acc.value)) + #LOGGER.info("Overall Detection Accuracy: {}\n".format(self.overall_detection_acc.value)) if len(self.attack_connections) > 0: self.cryptomining_attack_detection_acc.value = self.correct_attack_conns / len(self.attack_connections) else: self.cryptomining_attack_detection_acc.value = 0 - LOGGER.info("Cryptomining Attack Detection Accuracy: {}".format(self.cryptomining_attack_detection_acc.value)) - LOGGER.info("Cryptomining Detector Confidence: {}".format(self.confidence.value)) + #LOGGER.info("Cryptomining Attack Detection Accuracy: {}".format(self.cryptomining_attack_detection_acc.value)) + #LOGGER.info("Cryptomining Detector Confidence: {}".format(self.confidence.value)) - LOGGER.info("Time elapsed: {}".format(time.time() - TIME_START)) + #LOGGER.info("Time elapsed: {}".format(time.time() - TIME_START)) self.attack_connections_len.value = len(self.attack_connections) + self.f1_score_macro.value = metrics.f1_score(self.y_true, self.y_pred, average="macro") + self.f1_score_weighted.value = metrics.f1_score(self.y_true, self.y_pred, average="weighted") + self.balanced_accuracy.value = metrics.balanced_accuracy_score(self.y_true, self.y_pred) + self.precision_score.value = metrics.precision_score(self.y_true, self.y_pred, average="macro") + self.recall_score.value = metrics.recall_score(self.y_true, self.y_pred, average="macro") + with open("prediction_accuracy.txt", "a") as f: - LOGGER.debug("Exporting prediction accuracy and confidence") + #LOGGER.debug("Exporting prediction accuracy and confidence") f.write("Overall Detection Accuracy: {}\n".format(self.overall_detection_acc.value)) f.write("Cryptomining Attack Detection Accuracy: {}\n".format(self.cryptomining_attack_detection_acc.value)) @@ -668,30 +719,39 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto LOGGER.debug("Starting async prediction accuracy analysis exp 3") LOGGER.debug("Correct csv load: {}".format(os.path.exists("/var/teraflow/scalability_accuracy.csv"))) + timestamp_start = datetime.now().strftime("%d/%m/%Y-%H:%M:%S") + # Wait for the system to stabilize time.sleep(self.time_to_stabilize * 60) + + np.save("y_true_max_conn_{}_time_to_stabilize_{}_exp2.npy".format(self.max_connection_time, self.time_to_stabilize), self.y_true) + np.save("y_pred_max_conn_{}_time_to_stabilize_{}_exp2.npy".format(self.max_connection_time, self.time_to_stabilize), self.y_pred) + LOGGER.debug("Scalability csv started") - with open("/var/teraflow/scalability_accuracy.csv", 'w', newline='') as f: + with open("/var/teraflow/scalability_accuracy.csv", 'a', newline='') as f: spamwriter = csv.writer(f, delimiter=' ', quotechar='|', quoting=csv.QUOTE_MINIMAL) - spamwriter.writerow(['OVERALL_ACCURACY', 'CRYPTO_ACCURACY', + # F1_SCORE_MACRO F1_SCORE_WEIGHTED BALANCED_ACCURACY PRECISION_SCORE RECALL_SCORE OVERALL_ACCURACY CRYPTO_ACCURACY TOTAL_PREDICTIONS TOTAL_POSITIVES F_POSITIVES T_NEGATIVES F_NEGATIVES CONFIDENCE TIMESTAMP_START TIMESTAMP_FINISH SAMPLING_SNAPSHOTS SAMPLING_RATE SAMPLING_MODE TIME_TO_STABILIZE + '''spamwriter.writerow(['F1_SCORE_MACRO', 'F1_SCORE_WEIGHTED', 'BALANCED_ACCURACY', 'PRECISION_SCORE', + 'RECALL_SCORE', 'OVERALL_ACCURACY', 'CRYPTO_ACCURACY', 'TOTAL_PREDICTIONS', 'TOTAL_POSITIVES', 'F_POSITIVES', - 'T_NEGATIVES', 'F_NEGATIVES', 'CONFIDENCE', 'TIMESTAMP', - 'SAMPLING_INTERVAL', 'SAMPLING_RATE', 'SAMPLING_MODE', 'TIME_TO_STABILIZE']) + 'T_NEGATIVES', 'F_NEGATIVES', 'CONFIDENCE', 'TIMESTAMP_START', 'TIMESTAMP_FINISH', + 'SAMPLING_SNAPSHOTS', 'SAMPLING_RATE', 'SAMPLING_MODE', 'TIME_TO_STABILIZE'])''' - spamwriter.writerow([self.overall_detection_acc.value, self.cryptomining_attack_detection_acc.value, + spamwriter.writerow([self.f1_score_macro.value, self.f1_score_weighted.value, self.balanced_accuracy.value, + self.precision_score.value, self.recall_score.value, self.overall_detection_acc.value, self.cryptomining_attack_detection_acc.value, self.total_predictions.value, self.attack_connections_len.value, self.false_positives.value, self.total_predictions.value - self.attack_connections_len.value, self.false_negatives.value, - self.confidence.value, datetime.now().strftime("%d/%m/%Y %H:%M:%S"), - self.sampling_interval, self.sampling_rate, self.sampling_mode, self.time_to_stabilize]) + self.confidence.value, timestamp_start, datetime.now().strftime("%d/%m/%Y-%H:%M:%S"), + self.sampling_snapshots, self.sampling_rate, self.sampling_mode, self.time_to_stabilize]) f.close() @safe_and_metered_rpc_method(METRICS_POOL, LOGGER) def GetScalabilityConfig(self, request, context): - LOGGER.info("Received scalability config request") + LOGGER.info("Received scalability config request for Exp 3") self.time_to_stabilize = request.time_to_stabilize - self.sampling_interval = request.sampling_interval + self.sampling_snapshots = request.sampling_snapshots self.sampling_rate = request.sampling_rate if request.sampling_mode == SamplingMode.RANDOM: @@ -701,7 +761,7 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto else: self.sampling_mode = "Last" - LOGGER.debug("Sampling interval: {}".format(self.sampling_interval)) + LOGGER.debug("Sampling snapshots: {}".format(self.sampling_snapshots)) LOGGER.debug("Sampling rate: {}".format(self.sampling_rate)) LOGGER.debug("Sampling mode: {}".format(self.sampling_mode)) @@ -709,7 +769,7 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto p = Process(target=self.generate_accuracy_scalability_csv) p.start() - return Empty(message="CSV started") + return Empty(message="CSV generated") def AnalyzeBatchConnectionStatistics(self, request, context): batch_time_start = time.time() @@ -724,8 +784,8 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto f.write(str(batch_time_end - batch_time_start) + "\n\n") f.close() - logging.debug("Metrics: " + str(len(request.metrics))) - logging.debug("Batch time: " + str(batch_time_end - batch_time_start)) + #logging.debug("Metrics: " + str(len(request.metrics))) + #logging.debug("Batch time: " + str(batch_time_end - batch_time_start)) return Empty(message="OK, information received.")