diff --git a/cad_log.txt b/cad_log.txt index a91cff2f9cec39908ce6bef5dc468b1bb6adb1f6..5fa948760685db00ff4f5ce674dbb6c9d18684cc 100644 --- a/cad_log.txt +++ b/cad_log.txt @@ -2,7 +2,7 @@ INFO:__main__:Starting... DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorService:Starting Service (tentative endpoint: 0.0.0.0:10001, max_workers: 10)... INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Creating Centralized Attack Detector Service - Scalability Experiment 2 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Cryptomining Detector Features: [3.0, 5.0, 7.0, 8.0, 9.0, 17.0, 19.0, 21.0, 22.0, 23.0] -DEBUG:monitoring.client.MonitoringClient:Creating channel to 10.152.183.162:7070... +DEBUG:monitoring.client.MonitoringClient:Creating channel to 10.152.183.103:7070... DEBUG:monitoring.client.MonitoringClient:Channel created DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:Creating channel to l3-attackmitigatorservice:10002... DEBUG:l3_attackmitigator.client.l3_attackmitigatorClient:Channel created @@ -10,39 +10,57 @@ INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorService:Li DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorService:Service started DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetFeaturesIds request: {"message": ""} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetFeaturesIds reply: {"auto_features": [3.0, 5.0, 7.0, 8.0, 9.0, 17.0, 19.0, 21.0, 22.0, 23.0]} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetScalabilityConfig request: {"max_connection_time": 60.0, "time_to_stabilize": 12.0} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetScalabilityConfig request: {"max_connection_time": 30.0, "time_to_stabilize": 2.0} INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Received scalability config request for Exp 2 -E0504 16:07:55.337487383 107 fork_posix.cc:76] Other threads are currently calling into gRPC, skipping fork() handlers DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:GetScalabilityConfig reply: {"message": "CSV generated"} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Starting async prediction accuracy analysis DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Correct csv load: False -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.008855342864990234 seconds -INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.029759883880615234 seconds +INFO:root:Inference performed correctly +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 1 INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Creating KPIs for service context_id { context_uuid { uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" } } service_uuid { - uuid: "735a8309-93c5-4d18-82be-6ffe12d821a9" + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" } -DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Confidence of the cryptomining detector in the security status in the last time interval of the service 735a8309-93c5-4d18-82be-6ffe12d821a9", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_SECURITY_STATUS_CRYPTO", "service_id": {"service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}} +DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Confidence of the cryptomining detector in the security status in the last time interval of the service add16ef9-0593-433a-a563-28bb517fd32e", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_SECURITY_STATUS_CRYPTO", "service_id": {"service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}} DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "17"}} INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_security_status -DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Security status of the service in a time interval of the service 735a8309-93c5-4d18-82be-6ffe12d821a9 (\u201c0\u201d if no attack has been detected on the service and \u201c1\u201d if a cryptomining attack has been detected)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_ML_CONFIDENCE", "service_id": {"service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}} +DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Security status of the service in a time interval of the service add16ef9-0593-433a-a563-28bb517fd32e (\u201c0\u201d if no attack has been detected on the service and \u201c1\u201d if a cryptomining attack has been detected)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_ML_CONFIDENCE", "service_id": {"service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}} DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "18"}} INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_ml_model_confidence -DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Number of attack connections detected in a time interval of the service 735a8309-93c5-4d18-82be-6ffe12d821a9 (attacks of the same connection [origin IP, origin port, destination IP and destination port] are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_ATTACK_CONNS", "service_id": {"service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}} +DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Number of attack connections detected in a time interval of the service add16ef9-0593-433a-a563-28bb517fd32e (attacks of the same connection [origin IP, origin port, destination IP and destination port] are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_ATTACK_CONNS", "service_id": {"service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}} DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "19"}} INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_unique_attack_conns -DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Number of unique compromised clients of the service in a time interval of the service 735a8309-93c5-4d18-82be-6ffe12d821a9 (attacks from the same origin IP are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_COMPROMISED_CLIENTS", "service_id": {"service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}} +DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - Number of unique compromised clients of the service in a time interval of the service add16ef9-0593-433a-a563-28bb517fd32e (attacks from the same origin IP are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_COMPROMISED_CLIENTS", "service_id": {"service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}} DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "20"}} INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_unique_compromised_clients -DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - number of unique attackers of the service in a time interval of the service 735a8309-93c5-4d18-82be-6ffe12d821a9 (attacks from the same destination IP are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_ATTACKERS", "service_id": {"service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}} +DEBUG:monitoring.client.MonitoringClient:SetKpi: {"kpi_description": "L3 - number of unique attackers of the service in a time interval of the service add16ef9-0593-433a-a563-28bb517fd32e (attacks from the same destination IP are only considered once)", "kpi_id_list": [], "kpi_sample_type": "KPISAMPLETYPE_L3_UNIQUE_ATTACKERS", "service_id": {"service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}} DEBUG:monitoring.client.MonitoringClient:SetKpi result: {"kpi_id": {"uuid": "21"}} INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPI l3_unique_attackers INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Created KPIs for service context_id { @@ -51,11 +69,39 @@ INFO:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSer } } service_uuid { - uuid: "735a8309-93c5-4d18-82be-6ffe12d821a9" + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" } DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:No KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.00028133392333984375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} /usr/local/lib/python3.9/site-packages/numpy/lib/function_base.py:518: RuntimeWarning: Mean of empty slice. avg = a.mean(axis, **keepdims_kw) /usr/local/lib/python3.9/site-packages/numpy/core/_methods.py:190: RuntimeWarning: invalid value encountered in double_scalars @@ -73,6202 +119,12842 @@ DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceSe /usr/local/lib/python3.9/site-packages/numpy/core/_methods.py:190: RuntimeWarning: invalid value encountered in double_scalars ret = ret.dtype.type(ret / rcount) INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004851818084716797 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.602595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.057027}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99786454}, "timestamp": {"timestamp": 1683216475.602595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99786454}, "timestamp": {"timestamp": 1683553247.057027}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.602595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.057027}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.602595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.057027}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.602595}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.057027}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03296518325805664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004162788391113281 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.670682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.102088}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9976575}, "timestamp": {"timestamp": 1683216475.670682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9976575}, "timestamp": {"timestamp": 1683553247.102088}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.670682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.102088}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.670682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.102088}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.670682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.102088}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02741861343383789 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002951622009277344 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.733682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.151983}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9976379}, "timestamp": {"timestamp": 1683216475.733682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9976379}, "timestamp": {"timestamp": 1683553247.151983}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.733682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.151983}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.733682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.151983}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.733682}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.151983}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02438950538635254 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00034880638122558594 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.826114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.182837}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99822843}, "timestamp": {"timestamp": 1683216475.826114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99822843}, "timestamp": {"timestamp": 1683553247.182837}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.826114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.182837}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.826114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.182837}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.826114}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.182837}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03600478172302246 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004305839538574219 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.885043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.228724}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9985827}, "timestamp": {"timestamp": 1683216475.885043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9985827}, "timestamp": {"timestamp": 1683553247.228724}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.885043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.228724}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.885043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.228724}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.885043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.228724}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02895665168762207 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00028967857360839844 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.924746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.265045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99881893}, "timestamp": {"timestamp": 1683216475.924746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99881893}, "timestamp": {"timestamp": 1683553247.265045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.924746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.265045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.924746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.265045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.924746}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.265045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02017664909362793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003826618194580078 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.995927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.29194}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9989877}, "timestamp": {"timestamp": 1683216475.995927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9989877}, "timestamp": {"timestamp": 1683553247.29194}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.995927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.29194}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.995927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.29194}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216475.995927}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.29194}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02292919158935547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00029468536376953125 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.052024}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.321675}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9991142}, "timestamp": {"timestamp": 1683216476.052024}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9991142}, "timestamp": {"timestamp": 1683553247.321675}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.052024}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.321675}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.052024}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.321675}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.052024}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.321675}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02007460594177246 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003712177276611328 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.124463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.34795}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9992126}, "timestamp": {"timestamp": 1683216476.124463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9992126}, "timestamp": {"timestamp": 1683553247.34795}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.124463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.34795}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.124463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.34795}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.124463}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.34795}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.020403146743774414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:46', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00026869773864746094 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016207695007324219 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 2 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.195225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.389765}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99929136}, "timestamp": {"timestamp": 1683216476.195225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99929136}, "timestamp": {"timestamp": 1683553247.389765}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.195225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.389765}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.195225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.389765}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.195225}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.389765}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021584749221801758 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007331371307373047 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.244158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.417315}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9993558}, "timestamp": {"timestamp": 1683216476.244158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9993558}, "timestamp": {"timestamp": 1683553247.417315}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.244158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.417315}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.244158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.417315}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.244158}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.417315}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024779319763183594 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00026869773864746094 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.309098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.455301}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994095}, "timestamp": {"timestamp": 1683216476.309098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994095}, "timestamp": {"timestamp": 1683553247.455301}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.309098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.455301}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.309098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.455301}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.309098}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.455301}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026401519775390625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006153583526611328 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.391117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.488581}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994549}, "timestamp": {"timestamp": 1683216476.391117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9994549}, "timestamp": {"timestamp": 1683553247.488581}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.391117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.488581}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.391117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.488581}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.391117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.488581}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05742335319519043 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003521442413330078 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.449812}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.552515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99949384}, "timestamp": {"timestamp": 1683216476.449812}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99949384}, "timestamp": {"timestamp": 1683553247.552515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.449812}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.552515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.449812}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.552515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.449812}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.552515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02565312385559082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005242824554443359 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.509264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.596479}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995276}, "timestamp": {"timestamp": 1683216476.509264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995276}, "timestamp": {"timestamp": 1683553247.596479}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.509264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.596479}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.509264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.596479}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.509264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.596479}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029513120651245117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002617835998535156 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.538227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.631866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99955714}, "timestamp": {"timestamp": 1683216476.538227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99955714}, "timestamp": {"timestamp": 1683553247.631866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.538227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.631866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.538227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.631866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.538227}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.631866}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025673627853393555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004849433898925781 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.611162}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.663307}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995832}, "timestamp": {"timestamp": 1683216476.611162}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995832}, "timestamp": {"timestamp": 1683553247.663307}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.611162}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.663307}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.611162}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.663307}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.611162}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.663307}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02530980110168457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00040984153747558594 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.698881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.707607}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683216476.698881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683553247.707607}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.698881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.707607}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.698881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.707607}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.698881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.707607}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03188490867614746 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005638599395751953 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.752341}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683216476.752341}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.752341}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.752341}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.752341}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007946491241455078 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.89923}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996457}, "timestamp": {"timestamp": 1683216476.89923}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.89923}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.89923}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.89923}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005133152008056641 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.954821}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996626}, "timestamp": {"timestamp": 1683216476.954821}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.954821}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.954821}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216476.954821}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00033211708068847656 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.00899}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683216477.00899}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.00899}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.00899}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.00899}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005061626434326172 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.091835}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683216477.091835}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.091835}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.091835}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.091835}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00038242340087890625 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.135874}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997047}, "timestamp": {"timestamp": 1683216477.135874}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.135874}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.135874}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.135874}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002491474151611328 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.21232}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997165}, "timestamp": {"timestamp": 1683216477.21232}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.21232}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.21232}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.21232}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014204978942871094 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.254447}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996453}, "timestamp": {"timestamp": 1683216477.254447}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.254447}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.254447}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.254447}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003364086151123047 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.308425}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956405}, "timestamp": {"timestamp": 1683216477.308425}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.308425}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.308425}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.308425}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.000385284423828125 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.392051}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99949384}, "timestamp": {"timestamp": 1683216477.392051}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.392051}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.392051}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.392051}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00031280517578125 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.423097}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995113}, "timestamp": {"timestamp": 1683216477.423097}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.423097}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.423097}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.423097}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00031447410583496094 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.514384}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995276}, "timestamp": {"timestamp": 1683216477.514384}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.514384}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.514384}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.514384}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003253459930419922 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.574294}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99954283}, "timestamp": {"timestamp": 1683216477.574294}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.574294}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.574294}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.574294}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00036072731018066406 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.634899}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99955714}, "timestamp": {"timestamp": 1683216477.634899}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.634899}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.634899}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.634899}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003123283386230469 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.689617}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957055}, "timestamp": {"timestamp": 1683216477.689617}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.689617}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.689617}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.689617}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005292892456054688 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.749296}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995832}, "timestamp": {"timestamp": 1683216477.749296}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.749296}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.749296}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.749296}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004208087921142578 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.816696}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959505}, "timestamp": {"timestamp": 1683216477.816696}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.816696}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.816696}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.816696}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006413459777832031 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.868582}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683216477.868582}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.868582}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.868582}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.868582}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00033283233642578125 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.924336}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999617}, "timestamp": {"timestamp": 1683216477.924336}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.924336}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.924336}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216477.924336}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003185272216796875 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.010391}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683216478.010391}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.010391}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.010391}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.010391}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005879402160644531 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.090316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.745504}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996366}, "timestamp": {"timestamp": 1683216478.090316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683553247.745504}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.090316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.745504}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.090316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.745504}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.090316}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.745504}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026282548904418945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0033943653106689453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009741783142089844 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 3 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.153479}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.89148}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996457}, "timestamp": {"timestamp": 1683216478.153479}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996457}, "timestamp": {"timestamp": 1683553247.89148}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.153479}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.89148}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.153479}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.89148}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.153479}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.89148}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027896881103515625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00023937225341796875 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.21004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.928103}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965435}, "timestamp": {"timestamp": 1683216478.21004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996626}, "timestamp": {"timestamp": 1683553247.928103}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.21004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.928103}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.21004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.928103}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.21004}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.928103}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03084850311279297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002048015594482422 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.244932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.967877}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996626}, "timestamp": {"timestamp": 1683216478.244932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683553247.967877}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.244932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.967877}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.244932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.967877}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.244932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553247.967877}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02451181411743164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002963542938232422 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.305873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.000898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996704}, "timestamp": {"timestamp": 1683216478.305873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683553248.000898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.305873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.000898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.305873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.000898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.305873}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.000898}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026924848556518555 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003609657287597656 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.367562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.035913}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683216478.367562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997047}, "timestamp": {"timestamp": 1683553248.035913}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.367562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.035913}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.367562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.035913}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.367562}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.035913}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026112079620361328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003154277801513672 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.424911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.068288}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968505}, "timestamp": {"timestamp": 1683216478.424911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997165}, "timestamp": {"timestamp": 1683553248.068288}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.424911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.068288}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.424911}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.068288}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.424911}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server - -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00027441978454589844 seconds -INFO:root:Inference performed correctly - -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.490201}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683216478.490201}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.490201}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.490201}} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.490201}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.068288}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0395350456237793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002129077911376953 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.522047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.115287}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969846}, "timestamp": {"timestamp": 1683216478.522047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996453}, "timestamp": {"timestamp": 1683553248.115287}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.522047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.115287}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.522047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.115287}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.522047}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.115287}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03279900550842285 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0039403438568115234 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.609253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.155208}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997047}, "timestamp": {"timestamp": 1683216478.609253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99956405}, "timestamp": {"timestamp": 1683553248.155208}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.609253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.155208}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.609253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.155208}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.609253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.155208}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02379751205444336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00025582313537597656 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.644566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.186303}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99971074}, "timestamp": {"timestamp": 1683216478.644566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99949384}, "timestamp": {"timestamp": 1683553248.186303}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.644566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.186303}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.644566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.186303}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.644566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.186303}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03275442123413086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004963874816894531 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.793366}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.226511}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997165}, "timestamp": {"timestamp": 1683216478.793366}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995113}, "timestamp": {"timestamp": 1683553248.226511}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.793366}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.226511}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.793366}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.226511}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.793366}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.226511}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02545928955078125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:47', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00017547607421875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011472702026367188 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 4 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.820813}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.276945}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997221}, "timestamp": {"timestamp": 1683216478.820813}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995276}, "timestamp": {"timestamp": 1683553248.276945}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.820813}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.276945}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.820813}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.276945}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.820813}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.276945}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02391791343688965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002429485321044922 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.890165}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.311437}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968636}, "timestamp": {"timestamp": 1683216478.890165}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99954283}, "timestamp": {"timestamp": 1683553248.311437}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.890165}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.311437}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.890165}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.311437}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.890165}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.311437}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03858494758605957 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002110004425048828 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.916602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.360566}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996442}, "timestamp": {"timestamp": 1683216478.916602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99955714}, "timestamp": {"timestamp": 1683553248.360566}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.916602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.360566}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.916602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.360566}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.916602}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.360566}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028443336486816406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00020170211791992188 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.986668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.397515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683216478.986668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957055}, "timestamp": {"timestamp": 1683553248.397515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.986668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.397515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.986668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.397515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216478.986668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.397515}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0247652530670166 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00020837783813476562 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.017622}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.454047}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961346}, "timestamp": {"timestamp": 1683216479.017622}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995832}, "timestamp": {"timestamp": 1683553248.454047}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.017622}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.454047}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.017622}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.454047}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.017622}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.454047}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025177717208862305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00024819374084472656 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.090776}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.488357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996204}, "timestamp": {"timestamp": 1683216479.090776}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959505}, "timestamp": {"timestamp": 1683553248.488357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.090776}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.488357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.090776}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.488357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.090776}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.488357}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024274110794067383 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003063678741455078 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.126826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.524057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683216479.126826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683553248.524057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.126826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.524057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.126826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.524057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.126826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.524057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024216890335083008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002548694610595703 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.190393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.556173}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996335}, "timestamp": {"timestamp": 1683216479.190393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999617}, "timestamp": {"timestamp": 1683553248.556173}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.190393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.556173}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.190393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.556173}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.190393}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.556173}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02258157730102539 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00021982192993164062 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.219505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.587792}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996397}, "timestamp": {"timestamp": 1683216479.219505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683553248.587792}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.219505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.587792}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.219505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.587792}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.219505}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.587792}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02343606948852539 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003609657287597656 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.343788}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.618547}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996457}, "timestamp": {"timestamp": 1683216479.343788}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996366}, "timestamp": {"timestamp": 1683553248.618547}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.343788}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.618547}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.343788}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.618547}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.343788}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.618547}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021480321884155273 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00024509429931640625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008389949798583984 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 5 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.38591}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.660048}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996515}, "timestamp": {"timestamp": 1683216479.38591}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996457}, "timestamp": {"timestamp": 1683553248.660048}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.38591}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.660048}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.38591}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.660048}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.38591}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.660048}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02133011817932129 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002186298370361328 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.42714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.695358}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996571}, "timestamp": {"timestamp": 1683216479.42714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965435}, "timestamp": {"timestamp": 1683553248.695358}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.42714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.695358}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.42714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.695358}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.42714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.695358}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02308368682861328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00045180320739746094 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.491188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.725198}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996626}, "timestamp": {"timestamp": 1683216479.491188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996626}, "timestamp": {"timestamp": 1683553248.725198}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.491188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.725198}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.491188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.725198}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.491188}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.725198}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02564716339111328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003147125244140625 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.544274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.757668}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996678}, "timestamp": {"timestamp": 1683216479.544274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996704}, "timestamp": {"timestamp": 1683553248.757668}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.544274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.757668}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.544274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.757668}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.544274}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.757668}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02547597885131836 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003752708435058594 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.60132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.790099}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967295}, "timestamp": {"timestamp": 1683216479.60132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683553248.790099}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.60132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.790099}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.60132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.790099}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.60132}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.790099}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02151942253112793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.03573274612426758 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.694546}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.818181}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683216479.694546}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968505}, "timestamp": {"timestamp": 1683553248.818181}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.694546}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.818181}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.694546}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.818181}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.694546}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.818181}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02733922004699707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0030975341796875 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.749228}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.852245}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965084}, "timestamp": {"timestamp": 1683216479.749228}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683553248.852245}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.749228}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.852245}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.749228}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.852245}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.749228}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.852245}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02204275131225586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002739429473876953 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.799866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.88109}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996185}, "timestamp": {"timestamp": 1683216479.799866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969846}, "timestamp": {"timestamp": 1683553248.88109}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.799866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.88109}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.799866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.88109}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.799866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.88109}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02111959457397461 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0031898021697998047 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.868443}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.908067}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995892}, "timestamp": {"timestamp": 1683216479.868443}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997047}, "timestamp": {"timestamp": 1683553248.908067}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.868443}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.908067}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.868443}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.908067}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.868443}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.908067}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02094721794128418 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005061626434326172 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.939834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.93568}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959505}, "timestamp": {"timestamp": 1683216479.939834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99971074}, "timestamp": {"timestamp": 1683553248.93568}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.939834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.93568}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.939834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.93568}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.939834}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553248.93568}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021287202835083008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:48', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00029397010803222656 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:50566:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "50566", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011785030364990234 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 6 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.972826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.050855}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99960077}, "timestamp": {"timestamp": 1683216479.972826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997165}, "timestamp": {"timestamp": 1683553249.050855}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.972826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.050855}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.972826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.050855}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216479.972826}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.050855}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00028228759765625 seconds -INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03074955940246582 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:50566:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '50566', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} +INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.029389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.092927}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683216480.029389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997221}, "timestamp": {"timestamp": 1683553249.092927}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.029389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.092927}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.029389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.092927}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.029389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.092927}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027966976165771484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00032401084899902344 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.086889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.128014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961174}, "timestamp": {"timestamp": 1683216480.086889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968636}, "timestamp": {"timestamp": 1683553249.128014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.086889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.128014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.086889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.128014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.086889}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.128014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024025440216064453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.000232696533203125 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.133916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.159409}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999617}, "timestamp": {"timestamp": 1683216480.133916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996442}, "timestamp": {"timestamp": 1683553249.159409}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.133916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.159409}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.133916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.159409}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.133916}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.159409}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0341489315032959 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0001838207244873047 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.191277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.208576}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962205}, "timestamp": {"timestamp": 1683216480.191277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683553249.208576}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.191277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.208576}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.191277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.208576}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.191277}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.208576}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.046476125717163086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009899139404296875 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.23107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.263319}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683216480.23107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961346}, "timestamp": {"timestamp": 1683553249.263319}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.23107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.263319}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.23107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.263319}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.23107}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.263319}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03942465782165527 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003421306610107422 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.311175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.313677}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996319}, "timestamp": {"timestamp": 1683216480.311175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996204}, "timestamp": {"timestamp": 1683553249.313677}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.311175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.313677}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.311175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.313677}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.311175}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.313677}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04789423942565918 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003445148468017578 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.355067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.37632}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996366}, "timestamp": {"timestamp": 1683216480.355067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683553249.37632}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.355067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.37632}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.355067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.37632}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.355067}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.37632}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03593921661376953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003592967987060547 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.429152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.419045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996412}, "timestamp": {"timestamp": 1683216480.429152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996335}, "timestamp": {"timestamp": 1683553249.419045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.429152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.419045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.429152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.419045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.429152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.419045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02161097526550293 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004315376281738281 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.621901}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.450958}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996457}, "timestamp": {"timestamp": 1683216480.621901}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996397}, "timestamp": {"timestamp": 1683553249.450958}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.621901}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.450958}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.621901}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.450958}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.621901}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.450958}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024674177169799805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005860328674316406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007281303405761719 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 7 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.670932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.579783}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965006}, "timestamp": {"timestamp": 1683216480.670932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996457}, "timestamp": {"timestamp": 1683553249.579783}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.670932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.579783}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.670932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.579783}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.670932}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.579783}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03486919403076172 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002491474151611328 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.701179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.621985}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996283}, "timestamp": {"timestamp": 1683216480.701179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996515}, "timestamp": {"timestamp": 1683553249.621985}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.701179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.621985}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.701179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.621985}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.701179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.621985}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0262453556060791 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002288818359375 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.730209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.654799}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999602}, "timestamp": {"timestamp": 1683216480.730209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996571}, "timestamp": {"timestamp": 1683553249.654799}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.730209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.654799}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.730209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.654799}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.730209}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.654799}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03943347930908203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00025725364685058594 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.791853}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.700972}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995782}, "timestamp": {"timestamp": 1683216480.791853}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996626}, "timestamp": {"timestamp": 1683553249.700972}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.791853}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.700972}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.791853}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.700972}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.791853}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.700972}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026064634323120117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002493858337402344 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.822343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.734026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995832}, "timestamp": {"timestamp": 1683216480.822343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996678}, "timestamp": {"timestamp": 1683553249.734026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.822343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.734026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.822343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.734026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.822343}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.734026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026062965393066406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002510547637939453 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.891573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.766835}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999588}, "timestamp": {"timestamp": 1683216480.891573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967295}, "timestamp": {"timestamp": 1683553249.766835}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.891573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.766835}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.891573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.766835}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.891573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.766835}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03828787803649902 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00032639503479003906 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.922052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.815371}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995927}, "timestamp": {"timestamp": 1683216480.922052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683553249.815371}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.922052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.815371}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.922052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.815371}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.922052}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.815371}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.040876150131225586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00029754638671875 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.991536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.866234}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995974}, "timestamp": {"timestamp": 1683216480.991536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965084}, "timestamp": {"timestamp": 1683553249.866234}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.991536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.866234}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.991536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.866234}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216480.991536}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.866234}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032279253005981445 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0001609325408935547 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.018569}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.906886}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996019}, "timestamp": {"timestamp": 1683216481.018569}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996185}, "timestamp": {"timestamp": 1683553249.906886}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.018569}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.906886}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.018569}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.906886}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.018569}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.906886}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0314180850982666 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009081363677978516 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.162283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.946245}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683216481.162283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995892}, "timestamp": {"timestamp": 1683553249.946245}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.162283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.946245}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.162283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.946245}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.162283}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553249.946245}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03281903266906738 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:49', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00036644935607910156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007600784301757812 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 8 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.204507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.002882}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961066}, "timestamp": {"timestamp": 1683216481.204507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959505}, "timestamp": {"timestamp": 1683553250.002882}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.204507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.002882}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.204507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.002882}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.204507}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.002882}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022539615631103516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00034236907958984375 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.241333}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.033359}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996149}, "timestamp": {"timestamp": 1683216481.241333}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99960077}, "timestamp": {"timestamp": 1683553250.033359}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.241333}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.033359}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.241333}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.033359}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.241333}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.033359}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022398710250854492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004298686981201172 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.302722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.064169}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999619}, "timestamp": {"timestamp": 1683216481.302722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683553250.064169}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.302722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.064169}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.302722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.064169}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.302722}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.064169}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02330470085144043 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003955364227294922 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.339397}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.095867}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962306}, "timestamp": {"timestamp": 1683216481.339397}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961174}, "timestamp": {"timestamp": 1683553250.095867}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.339397}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.095867}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.339397}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.095867}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.339397}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.095867}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022199630737304688 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006177425384521484 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.424936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.125977}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683216481.424936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999617}, "timestamp": {"timestamp": 1683553250.125977}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.424936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.125977}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.424936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.125977}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.424936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.125977}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03917074203491211 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.023110628128051758 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.493302}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.174918}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996309}, "timestamp": {"timestamp": 1683216481.493302}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962205}, "timestamp": {"timestamp": 1683553250.174918}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.493302}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.174918}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.493302}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.174918}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.493302}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.174918}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028877735137939453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0002536773681640625 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.529102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.211885}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996127}, "timestamp": {"timestamp": 1683216481.529102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683553250.211885}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.529102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.211885}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.529102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.211885}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.529102}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.211885}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02256917953491211 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0004062652587890625 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.595218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.24258}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959064}, "timestamp": {"timestamp": 1683216481.595218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996319}, "timestamp": {"timestamp": 1683553250.24258}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.595218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.24258}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.595218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.24258}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.595218}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.24258}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024585962295532227 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0003898143768310547 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.637571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.275726}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957055}, "timestamp": {"timestamp": 1683216481.637571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996366}, "timestamp": {"timestamp": 1683553250.275726}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.637571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.275726}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.637571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.275726}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.637571}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.275726}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025571584701538086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004055976867675781 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.714232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.308349}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957484}, "timestamp": {"timestamp": 1683216481.714232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996412}, "timestamp": {"timestamp": 1683553250.308349}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.714232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.308349}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.714232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.308349}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.714232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.308349}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021136760711669922 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001004934310913086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006988048553466797 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 9 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.788151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.414753}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999579}, "timestamp": {"timestamp": 1683216481.788151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996457}, "timestamp": {"timestamp": 1683553250.414753}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.788151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.414753}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.788151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.414753}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.788151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.414753}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024466991424560547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.00119781494140625 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.824525}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.445967}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995832}, "timestamp": {"timestamp": 1683216481.824525}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965006}, "timestamp": {"timestamp": 1683553250.445967}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.824525}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.445967}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.824525}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.445967}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.824525}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.445967}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025560617446899414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012087821960449219 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.477605}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995872}, "timestamp": {"timestamp": 1683216481.918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996283}, "timestamp": {"timestamp": 1683553250.477605}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.477605}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.477605}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216481.918}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.477605}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05639338493347168 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011582374572753906 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.0024}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.541615}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995912}, "timestamp": {"timestamp": 1683216482.0024}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999602}, "timestamp": {"timestamp": 1683553250.541615}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.0024}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.541615}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.0024}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.541615}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.0024}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.541615}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024855852127075195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.046350717544555664 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.086352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.573019}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959505}, "timestamp": {"timestamp": 1683216482.086352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995782}, "timestamp": {"timestamp": 1683553250.573019}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.086352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.573019}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.086352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.573019}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.086352}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.573019}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025243759155273438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013744831085205078 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.145085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.60505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959886}, "timestamp": {"timestamp": 1683216482.145085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995832}, "timestamp": {"timestamp": 1683553250.60505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.145085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.60505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.145085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.60505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.145085}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.60505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02231311798095703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014336109161376953 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.229983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.633799}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996026}, "timestamp": {"timestamp": 1683216482.229983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999588}, "timestamp": {"timestamp": 1683553250.633799}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.229983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.633799}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.229983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.633799}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.229983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.633799}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03777289390563965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011229515075683594 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.279282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.678036}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683216482.279282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995927}, "timestamp": {"timestamp": 1683553250.678036}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.279282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.678036}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.279282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.678036}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.279282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.678036}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0295255184173584 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012962818145751953 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.359362}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.714235}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99960995}, "timestamp": {"timestamp": 1683216482.359362}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995974}, "timestamp": {"timestamp": 1683553250.714235}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.359362}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.714235}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.359362}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.714235}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.359362}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.714235}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024817705154418945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001371145248413086 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.409555}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.746122}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961346}, "timestamp": {"timestamp": 1683216482.409555}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996019}, "timestamp": {"timestamp": 1683553250.746122}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.409555}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.746122}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.409555}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.746122}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.409555}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.746122}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.020997285842895508 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013782978057861328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008366107940673828 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 10 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.461144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.866913}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999617}, "timestamp": {"timestamp": 1683216482.461144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683553250.866913}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.461144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.866913}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.461144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.866913}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.461144}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.866913}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03182077407836914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001012563705444336 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.52409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.906862}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996204}, "timestamp": {"timestamp": 1683216482.52409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961066}, "timestamp": {"timestamp": 1683553250.906862}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.52409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.906862}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.52409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.906862}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.52409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.906862}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026036977767944336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017364025115966797 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.610009}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.941201}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996237}, "timestamp": {"timestamp": 1683216482.610009}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996149}, "timestamp": {"timestamp": 1683553250.941201}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.610009}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.941201}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.610009}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.941201}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.610009}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.941201}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02267003059387207 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013418197631835938 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.672389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.97181}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683216482.672389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999619}, "timestamp": {"timestamp": 1683553250.97181}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.672389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.97181}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.672389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.97181}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.672389}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553250.97181}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021770000457763672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012860298156738281 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.714438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.001301}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996303}, "timestamp": {"timestamp": 1683216482.714438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962306}, "timestamp": {"timestamp": 1683553251.001301}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.714438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.001301}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.714438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.001301}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.714438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.001301}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02246260643005371 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001079559326171875 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.787354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.031331}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996335}, "timestamp": {"timestamp": 1683216482.787354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683553251.031331}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.787354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.031331}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.787354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.031331}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.787354}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.031331}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0301821231842041 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010499954223632812 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.828607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.06957}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996366}, "timestamp": {"timestamp": 1683216482.828607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996309}, "timestamp": {"timestamp": 1683553251.06957}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.828607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.06957}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.828607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.06957}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.828607}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.06957}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0230867862701416 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011742115020751953 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.900512}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.101055}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996397}, "timestamp": {"timestamp": 1683216482.900512}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996127}, "timestamp": {"timestamp": 1683553251.101055}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.900512}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.101055}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.900512}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.101055}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.900512}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.101055}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02080988883972168 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010602474212646484 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.986234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.130079}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996427}, "timestamp": {"timestamp": 1683216482.986234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959064}, "timestamp": {"timestamp": 1683553251.130079}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.986234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.130079}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.986234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.130079}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216482.986234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.130079}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02258920669555664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011677742004394531 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.056914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.161199}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996457}, "timestamp": {"timestamp": 1683216483.056914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957055}, "timestamp": {"timestamp": 1683553251.161199}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.056914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.161199}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.056914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.161199}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.056914}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.161199}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023030519485473633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:50', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003489255905151367 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0006589889526367188 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 11 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.122477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.204757}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964863}, "timestamp": {"timestamp": 1683216483.122477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99957484}, "timestamp": {"timestamp": 1683553251.204757}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.122477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.204757}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.122477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.204757}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.122477}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.204757}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027651309967041016 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.029312610626220703 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.186152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.239616}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996515}, "timestamp": {"timestamp": 1683216483.186152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999579}, "timestamp": {"timestamp": 1683553251.239616}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.186152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.239616}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.186152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.239616}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.186152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.239616}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021792173385620117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010709762573242188 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.228142}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.268951}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965435}, "timestamp": {"timestamp": 1683216483.228142}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995832}, "timestamp": {"timestamp": 1683553251.268951}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.228142}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.268951}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.228142}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.268951}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.228142}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.268951}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031742095947265625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010633468627929688 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.294777}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.308921}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996571}, "timestamp": {"timestamp": 1683216483.294777}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995872}, "timestamp": {"timestamp": 1683553251.308921}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.294777}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.308921}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.294777}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.308921}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.294777}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.308921}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03316497802734375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.016705989837646484 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.446418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.349186}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965984}, "timestamp": {"timestamp": 1683216483.446418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9995912}, "timestamp": {"timestamp": 1683553251.349186}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.446418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.349186}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.446418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.349186}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.446418}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.349186}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022764921188354492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.007684230804443359 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.647078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.383023}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996626}, "timestamp": {"timestamp": 1683216483.647078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959505}, "timestamp": {"timestamp": 1683553251.383023}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.647078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.383023}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.647078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.383023}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.647078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.383023}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02692103385925293 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0022335052490234375 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.70406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.418593}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996652}, "timestamp": {"timestamp": 1683216483.70406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99959886}, "timestamp": {"timestamp": 1683553251.418593}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.70406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.418593}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.70406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.418593}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.70406}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.418593}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029422760009765625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012402534484863281 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.751668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.460009}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996678}, "timestamp": {"timestamp": 1683216483.751668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996026}, "timestamp": {"timestamp": 1683553251.460009}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.751668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.460009}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.751668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.460009}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.751668}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.460009}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03035116195678711 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001260519027709961 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.808077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.501161}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996704}, "timestamp": {"timestamp": 1683216483.808077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996063}, "timestamp": {"timestamp": 1683553251.501161}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.808077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.501161}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.808077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.501161}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.808077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.501161}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030126333236694336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013442039489746094 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.869111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.541883}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967295}, "timestamp": {"timestamp": 1683216483.869111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99960995}, "timestamp": {"timestamp": 1683553251.541883}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.869111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.541883}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.869111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.541883}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.869111}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.541883}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037122249603271484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015823841094970703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007047653198242188 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 12 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.958603}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.612332}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967545}, "timestamp": {"timestamp": 1683216483.958603}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99961346}, "timestamp": {"timestamp": 1683553251.612332}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.958603}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.612332}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.958603}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.612332}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216483.958603}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.612332}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04225587844848633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009930133819580078 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.023264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.662812}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683216484.023264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999617}, "timestamp": {"timestamp": 1683553251.662812}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.023264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.662812}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.023264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.662812}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.023264}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.662812}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03732132911682129 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012438297271728516 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.087993}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.707998}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968034}, "timestamp": {"timestamp": 1683216484.087993}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996204}, "timestamp": {"timestamp": 1683553251.707998}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.087993}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.707998}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.087993}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.707998}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.087993}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.707998}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04006814956665039 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011115074157714844 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.143296}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.754508}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996827}, "timestamp": {"timestamp": 1683216484.143296}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996237}, "timestamp": {"timestamp": 1683553251.754508}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.143296}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.754508}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.143296}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.754508}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.143296}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.754508}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032120466232299805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014147758483886719 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.21599}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.793583}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968505}, "timestamp": {"timestamp": 1683216484.21599}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99962705}, "timestamp": {"timestamp": 1683553251.793583}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.21599}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.793583}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.21599}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.793583}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.21599}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.793583}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03716397285461426 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016202926635742188 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.305075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.838271}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996874}, "timestamp": {"timestamp": 1683216484.305075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996303}, "timestamp": {"timestamp": 1683553251.838271}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.305075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.838271}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.305075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.838271}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.305075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.838271}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05963706970214844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017917156219482422 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.38062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.908263}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968964}, "timestamp": {"timestamp": 1683216484.38062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996335}, "timestamp": {"timestamp": 1683553251.908263}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.38062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.908263}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.38062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.908263}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.38062}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.908263}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024339914321899414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001645803451538086 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.44527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.94118}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683216484.44527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996366}, "timestamp": {"timestamp": 1683553251.94118}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.44527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.94118}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.44527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.94118}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.44527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.94118}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03712940216064453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013396739959716797 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.54234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.986429}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996941}, "timestamp": {"timestamp": 1683216484.54234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996397}, "timestamp": {"timestamp": 1683553251.986429}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.54234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.986429}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.54234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.986429}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.54234}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553251.986429}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04760885238647461 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.002579212188720703 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.70183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.043726}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996963}, "timestamp": {"timestamp": 1683216484.70183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996427}, "timestamp": {"timestamp": 1683553252.043726}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.70183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.043726}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.70183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.043726}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.70183}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.043726}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026994943618774414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:51', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0029528141021728516 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016162395477294922 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 13 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.761699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.099166}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969846}, "timestamp": {"timestamp": 1683216484.761699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996457}, "timestamp": {"timestamp": 1683553252.099166}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.761699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.099166}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.761699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.099166}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.761699}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.099166}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0721275806427002 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010323524475097656 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.824527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.188314}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997006}, "timestamp": {"timestamp": 1683216484.824527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964863}, "timestamp": {"timestamp": 1683553252.188314}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.824527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.188314}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.824527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.188314}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.824527}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.188314}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030609607696533203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014903545379638672 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.907214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.225242}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997027}, "timestamp": {"timestamp": 1683216484.907214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996515}, "timestamp": {"timestamp": 1683553252.225242}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.907214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.225242}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.907214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.225242}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.907214}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.225242}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04517865180969238 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013995170593261719 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.965924}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.276214}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997047}, "timestamp": {"timestamp": 1683216484.965924}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965435}, "timestamp": {"timestamp": 1683553252.276214}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.965924}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.276214}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.965924}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.276214}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216484.965924}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.276214}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0319676399230957 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012972354888916016 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.057346}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.314907}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970675}, "timestamp": {"timestamp": 1683216485.057346}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996571}, "timestamp": {"timestamp": 1683553252.314907}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.057346}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.314907}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.057346}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.314907}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.057346}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.314907}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03658771514892578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009737014770507812 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.090252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.358767}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997088}, "timestamp": {"timestamp": 1683216485.090252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965984}, "timestamp": {"timestamp": 1683553252.358767}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.090252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.358767}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.090252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.358767}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.090252}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.358767}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.051079750061035156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009067058563232422 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.121827}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.420853}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969625}, "timestamp": {"timestamp": 1683216485.121827}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996626}, "timestamp": {"timestamp": 1683553252.420853}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.121827}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.420853}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.121827}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.420853}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.121827}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.420853}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.035881757736206055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009734630584716797 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.186705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.465631}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968106}, "timestamp": {"timestamp": 1683216485.186705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996652}, "timestamp": {"timestamp": 1683553252.465631}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.186705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.465631}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.186705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.465631}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.186705}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.465631}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04914522171020508 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0030176639556884766 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.234473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.525579}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996671}, "timestamp": {"timestamp": 1683216485.234473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996678}, "timestamp": {"timestamp": 1683553252.525579}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.234473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.525579}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.234473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.525579}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.234473}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.525579}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0244901180267334 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009844303131103516 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.308287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.562033}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996693}, "timestamp": {"timestamp": 1683216485.308287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996704}, "timestamp": {"timestamp": 1683553252.562033}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.308287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.562033}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.308287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.562033}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.308287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.562033}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03543853759765625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009412765502929688 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:4963:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "4963", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:31468:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "31468", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:16246:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "16246", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001003265380859375 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 14 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.359552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.627129}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996715}, "timestamp": {"timestamp": 1683216485.359552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967295}, "timestamp": {"timestamp": 1683553252.627129}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.359552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.627129}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.359552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.627129}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.359552}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.627129}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04364633560180664 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:4963:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '4963', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009264945983886719 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.399466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.67912}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967366}, "timestamp": {"timestamp": 1683216485.399466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967545}, "timestamp": {"timestamp": 1683553252.67912}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.399466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.67912}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.399466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.67912}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.399466}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.67912}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03711724281311035 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009679794311523438 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.452376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.724077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996758}, "timestamp": {"timestamp": 1683216485.452376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683553252.724077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.452376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.724077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.452376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.724077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.452376}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.724077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023790359497070312 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0018661022186279297 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.510232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.755894}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683216485.510232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968034}, "timestamp": {"timestamp": 1683553252.755894}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.510232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.755894}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.510232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.755894}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.510232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.755894}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.043317556381225586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013420581817626953 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.574402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.806569}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968}, "timestamp": {"timestamp": 1683216485.574402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996827}, "timestamp": {"timestamp": 1683553252.806569}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.574402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.806569}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.574402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.806569}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.574402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.806569}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024388790130615234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009272098541259766 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.619596}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.839424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999682}, "timestamp": {"timestamp": 1683216485.619596}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968505}, "timestamp": {"timestamp": 1683553252.839424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.619596}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.839424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.619596}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.839424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.619596}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.839424}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02422642707824707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008690357208251953 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.684661}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.870125}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968404}, "timestamp": {"timestamp": 1683216485.684661}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996874}, "timestamp": {"timestamp": 1683553252.870125}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.684661}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.870125}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.684661}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.870125}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.684661}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.870125}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026994943618774414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:31468:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '31468', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013575553894042969 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.727191}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.909883}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968606}, "timestamp": {"timestamp": 1683216485.727191}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968964}, "timestamp": {"timestamp": 1683553252.909883}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.727191}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.909883}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.727191}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.909883}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.727191}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.909883}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03711390495300293 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012774467468261719 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.796394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.963711}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999688}, "timestamp": {"timestamp": 1683216485.796394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683553252.963711}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.796394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.963711}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.796394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.963711}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.796394}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553252.963711}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04259681701660156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014977455139160156 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.848504}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.014123}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969}, "timestamp": {"timestamp": 1683216485.848504}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996941}, "timestamp": {"timestamp": 1683553253.014123}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.848504}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.014123}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.848504}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.014123}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.848504}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.014123}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029601335525512695 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:52', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:16246:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '16246', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015022754669189453 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:47025:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "47025", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:61912:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "61912", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010666847229003906 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 15 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.922854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.201243}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683216485.922854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996963}, "timestamp": {"timestamp": 1683553253.201243}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.922854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.201243}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.922854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.201243}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216485.922854}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.201243}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022949934005737305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001882314682006836 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.026797}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.236706}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996938}, "timestamp": {"timestamp": 1683216486.026797}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969846}, "timestamp": {"timestamp": 1683553253.236706}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.026797}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.236706}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.026797}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.236706}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.026797}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.236706}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0313873291015625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001161336898803711 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.101063}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.27472}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969566}, "timestamp": {"timestamp": 1683216486.101063}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997006}, "timestamp": {"timestamp": 1683553253.27472}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.101063}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.27472}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.101063}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.27472}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.101063}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.27472}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.019578218460083008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:47025:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '47025', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009968280792236328 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.14884}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.301045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969757}, "timestamp": {"timestamp": 1683216486.14884}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997027}, "timestamp": {"timestamp": 1683553253.301045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.14884}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.301045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.14884}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.301045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.14884}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.301045}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.019353866577148438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009567737579345703 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.211881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.329663}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969935}, "timestamp": {"timestamp": 1683216486.211881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997047}, "timestamp": {"timestamp": 1683553253.329663}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.211881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.329663}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.211881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.329663}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.211881}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.329663}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021910429000854492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0008831024169921875 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.255315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.358154}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997012}, "timestamp": {"timestamp": 1683216486.255315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970675}, "timestamp": {"timestamp": 1683553253.358154}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.255315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.358154}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.255315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.358154}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.255315}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.358154}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.020264625549316406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:61912:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '61912', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009369850158691406 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.317201}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.38545}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999703}, "timestamp": {"timestamp": 1683216486.317201}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997088}, "timestamp": {"timestamp": 1683553253.38545}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.317201}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.38545}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.317201}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.38545}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.317201}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.38545}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034912824630737305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009648799896240234 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.360579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.42989}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997047}, "timestamp": {"timestamp": 1683216486.360579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969625}, "timestamp": {"timestamp": 1683553253.42989}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.360579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.42989}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.360579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.42989}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.360579}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.42989}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03388094902038574 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.000949859619140625 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.425489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.470165}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997065}, "timestamp": {"timestamp": 1683216486.425489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968106}, "timestamp": {"timestamp": 1683553253.470165}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.425489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.470165}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.425489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.470165}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.425489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.470165}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02852177619934082 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014307498931884766 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.573338}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.51039}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970824}, "timestamp": {"timestamp": 1683216486.573338}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996671}, "timestamp": {"timestamp": 1683553253.51039}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.573338}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.51039}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.573338}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.51039}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.573338}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.51039}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07075071334838867 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013446807861328125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011072158813476562 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 16 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.616674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.602193}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997099}, "timestamp": {"timestamp": 1683216486.616674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996693}, "timestamp": {"timestamp": 1683553253.602193}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.616674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.602193}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.616674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.602193}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.616674}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.602193}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03336644172668457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001210927963256836 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.688317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.646934}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996992}, "timestamp": {"timestamp": 1683216486.688317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996715}, "timestamp": {"timestamp": 1683553253.646934}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.688317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.646934}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.688317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.646934}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.688317}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.646934}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02838420867919922 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013203620910644531 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.762385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.687746}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996862}, "timestamp": {"timestamp": 1683216486.762385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967366}, "timestamp": {"timestamp": 1683553253.687746}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.762385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.687746}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.762385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.687746}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.762385}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.687746}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029018402099609375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010368824005126953 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.799776}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.726716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996742}, "timestamp": {"timestamp": 1683216486.799776}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996758}, "timestamp": {"timestamp": 1683553253.726716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.799776}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.726716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.799776}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.726716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.799776}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.726716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04549694061279297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009598731994628906 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.832041}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.785014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967605}, "timestamp": {"timestamp": 1683216486.832041}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683553253.785014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.832041}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.785014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.832041}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.785014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.832041}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.785014}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03236103057861328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013346672058105469 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.910276}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.828569}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683216486.910276}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968}, "timestamp": {"timestamp": 1683553253.828569}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.910276}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.828569}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.910276}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.828569}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216486.910276}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.828569}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03184056282043457 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004083395004272461 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.010635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.870843}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967974}, "timestamp": {"timestamp": 1683216487.010635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999682}, "timestamp": {"timestamp": 1683553253.870843}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.010635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.870843}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.010635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.870843}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.010635}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.870843}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04322004318237305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014698505401611328 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.065592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.923415}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968153}, "timestamp": {"timestamp": 1683216487.065592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968404}, "timestamp": {"timestamp": 1683553253.923415}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.065592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.923415}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.065592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.923415}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.065592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.923415}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05815291404724121 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010747909545898438 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.13152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.988695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996833}, "timestamp": {"timestamp": 1683216487.13152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968606}, "timestamp": {"timestamp": 1683553253.988695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.13152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.988695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.13152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.988695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.13152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553253.988695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031034231185913086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015594959259033203 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.204863}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.026736}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968505}, "timestamp": {"timestamp": 1683216487.204863}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999688}, "timestamp": {"timestamp": 1683553254.026736}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.204863}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.026736}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.204863}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.026736}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.204863}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.026736}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021497726440429688 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:53', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012390613555908203 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010523796081542969 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 17 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.252909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.068}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996868}, "timestamp": {"timestamp": 1683216487.252909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969}, "timestamp": {"timestamp": 1683553254.068}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.252909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.068}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.252909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.068}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.252909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.068}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029175758361816406 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017592906951904297 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.341151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.109863}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996885}, "timestamp": {"timestamp": 1683216487.341151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683553254.109863}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.341151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.109863}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.341151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.109863}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.341151}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.109863}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033142805099487305 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013489723205566406 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.417586}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.150618}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969023}, "timestamp": {"timestamp": 1683216487.417586}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996938}, "timestamp": {"timestamp": 1683553254.150618}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.417586}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.150618}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.417586}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.150618}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.417586}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.150618}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02782440185546875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012664794921875 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.495071}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.186276}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683216487.495071}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969566}, "timestamp": {"timestamp": 1683553254.186276}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.495071}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.186276}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.495071}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.186276}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.495071}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.186276}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026200532913208008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013015270233154297 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.539983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.223103}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996936}, "timestamp": {"timestamp": 1683216487.539983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969757}, "timestamp": {"timestamp": 1683553254.223103}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.539983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.223103}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.539983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.223103}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.539983}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.223103}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05192089080810547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001405954360961914 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.604007}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.281466}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969524}, "timestamp": {"timestamp": 1683216487.604007}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969935}, "timestamp": {"timestamp": 1683553254.281466}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.604007}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.281466}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.604007}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.281466}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.604007}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.281466}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029036998748779297 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012156963348388672 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.643796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.318093}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969685}, "timestamp": {"timestamp": 1683216487.643796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997012}, "timestamp": {"timestamp": 1683553254.318093}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.643796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.318093}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.643796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.318093}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.643796}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.318093}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04392385482788086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014414787292480469 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.746239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.369176}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969846}, "timestamp": {"timestamp": 1683216487.746239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999703}, "timestamp": {"timestamp": 1683553254.369176}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.746239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.369176}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.746239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.369176}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.746239}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.369176}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.031487464904785156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009698867797851562 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.798714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.407673}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970007}, "timestamp": {"timestamp": 1683216487.798714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997047}, "timestamp": {"timestamp": 1683553254.407673}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.798714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.407673}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.798714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.407673}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.798714}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.407673}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024991512298583984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014243125915527344 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.904675}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.440073}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997016}, "timestamp": {"timestamp": 1683216487.904675}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997065}, "timestamp": {"timestamp": 1683553254.440073}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.904675}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.440073}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.904675}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.440073}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.904675}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.440073}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.020477294921875 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012352466583251953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 4029.0}, {"feature": 5.0}, {"feature": 4029.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004538297653198242 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 18 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.937765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.563618}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970317}, "timestamp": {"timestamp": 1683216487.937765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970824}, "timestamp": {"timestamp": 1683553254.563618}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.937765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.563618}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.937765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.563618}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.937765}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.563618}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026153087615966797 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010807514190673828 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.992698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.596297}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997047}, "timestamp": {"timestamp": 1683216487.992698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997099}, "timestamp": {"timestamp": 1683553254.596297}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.992698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.596297}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.992698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.596297}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216487.992698}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.596297}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03458285331726074 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011296272277832031 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.041103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.637828}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970627}, "timestamp": {"timestamp": 1683216488.041103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996992}, "timestamp": {"timestamp": 1683553254.637828}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.041103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.637828}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.041103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.637828}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.041103}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.637828}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030327796936035156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001033782958984375 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.124801}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.675276}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970776}, "timestamp": {"timestamp": 1683216488.124801}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996862}, "timestamp": {"timestamp": 1683553254.675276}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.124801}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.675276}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.124801}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.675276}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.124801}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.675276}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03579545021057129 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009319782257080078 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.192566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.718488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997093}, "timestamp": {"timestamp": 1683216488.192566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996742}, "timestamp": {"timestamp": 1683553254.718488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.192566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.718488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.192566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.718488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.192566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.718488}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03356313705444336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009710788726806641 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.225407}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.759227}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99971074}, "timestamp": {"timestamp": 1683216488.225407}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967605}, "timestamp": {"timestamp": 1683553254.759227}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.225407}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.759227}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.225407}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.759227}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.225407}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.759227}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0366978645324707 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011227130889892578 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.303767}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.802716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997122}, "timestamp": {"timestamp": 1683216488.303767}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683553254.802716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.303767}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.802716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.303767}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.802716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.303767}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.802716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.043267011642456055 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011143684387207031 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.344033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.854588}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970293}, "timestamp": {"timestamp": 1683216488.344033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967974}, "timestamp": {"timestamp": 1683553254.854588}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.344033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.854588}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.344033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.854588}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.344033}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.854588}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02799391746520996 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009489059448242188 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.424272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.896755}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996916}, "timestamp": {"timestamp": 1683216488.424272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968153}, "timestamp": {"timestamp": 1683553254.896755}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.424272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.896755}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.424272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.896755}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.424272}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.896755}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023508071899414062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010688304901123047 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.497409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.92667}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996811}, "timestamp": {"timestamp": 1683216488.497409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996833}, "timestamp": {"timestamp": 1683553254.92667}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.497409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.92667}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.497409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.92667}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.497409}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.92667}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009543895721435547 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0234677791595459 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012209415435791016 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 19 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.536152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.972239}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996827}, "timestamp": {"timestamp": 1683216488.536152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968505}, "timestamp": {"timestamp": 1683553254.972239}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.536152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.972239}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.536152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.972239}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.536152}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553254.972239}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022488832473754883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001108407974243164 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.620366}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.0057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996843}, "timestamp": {"timestamp": 1683216488.620366}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996868}, "timestamp": {"timestamp": 1683553255.0057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.620366}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.0057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.620366}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.0057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.620366}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.0057}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027675628662109375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009870529174804688 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.69255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.042383}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996858}, "timestamp": {"timestamp": 1683216488.69255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996885}, "timestamp": {"timestamp": 1683553255.042383}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.69255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.042383}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.69255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.042383}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.69255}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.042383}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.021959543228149414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.009253740310668945 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.750468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.072143}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996874}, "timestamp": {"timestamp": 1683216488.750468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969023}, "timestamp": {"timestamp": 1683553255.072143}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.750468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.072143}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.750468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.072143}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.750468}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.072143}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028001785278320312 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013802051544189453 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.830587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.108162}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996889}, "timestamp": {"timestamp": 1683216488.830587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683553255.108162}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.830587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.108162}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.830587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.108162}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.830587}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.108162}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02837347984313965 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001219034194946289 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.889094}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.143715}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996904}, "timestamp": {"timestamp": 1683216488.889094}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996936}, "timestamp": {"timestamp": 1683553255.143715}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.889094}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.143715}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.889094}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.143715}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.889094}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.143715}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05172324180603027 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010247230529785156 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.943497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.20267}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683216488.943497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969524}, "timestamp": {"timestamp": 1683553255.20267}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.943497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.20267}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.943497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.20267}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216488.943497}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.20267}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0483546257019043 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012412071228027344 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.01105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.258811}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996934}, "timestamp": {"timestamp": 1683216489.01105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969685}, "timestamp": {"timestamp": 1683553255.258811}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.01105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.258811}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.01105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.258811}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.01105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.258811}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06714868545532227 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004608631134033203 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.106105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.337041}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996948}, "timestamp": {"timestamp": 1683216489.106105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969846}, "timestamp": {"timestamp": 1683553255.337041}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.106105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.337041}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.106105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.337041}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.106105}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.337041}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.10251283645629883 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0015707015991210938 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.245906}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.447359}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996963}, "timestamp": {"timestamp": 1683216489.245906}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970007}, "timestamp": {"timestamp": 1683553255.447359}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.245906}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.447359}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.245906}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.447359}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.245906}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.447359}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027044296264648438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:54', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017414093017578125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 16.0}, {"feature": 16.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 12.0}, {"feature": 11.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:18590:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "18590", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 13.0}, {"feature": 12.0}, {"feature": 5220.0}, {"feature": 6.0}, {"feature": 5220.0}, {"feature": 17.0}, {"feature": 17.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009033679962158203 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 20 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.295069}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.583943}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969774}, "timestamp": {"timestamp": 1683216489.295069}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997016}, "timestamp": {"timestamp": 1683553255.583943}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.295069}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.583943}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.295069}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.583943}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.295069}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.583943}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028880834579467773 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010714530944824219 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.337082}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.620097}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996992}, "timestamp": {"timestamp": 1683216489.337082}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970317}, "timestamp": {"timestamp": 1683553255.620097}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.337082}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.620097}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.337082}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.620097}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.337082}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.620097}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022596359252929688 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001739501953125 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.416194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.649157}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969053}, "timestamp": {"timestamp": 1683216489.416194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997047}, "timestamp": {"timestamp": 1683553255.649157}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.416194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.649157}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.416194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.649157}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.416194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.649157}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025722742080688477 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017230510711669922 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.495263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.681378}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996801}, "timestamp": {"timestamp": 1683216489.495263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970627}, "timestamp": {"timestamp": 1683553255.681378}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.495263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.681378}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.495263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.681378}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.495263}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.681378}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02351665496826172 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019075870513916016 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.543864}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.711353}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996704}, "timestamp": {"timestamp": 1683216489.543864}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970776}, "timestamp": {"timestamp": 1683553255.711353}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.543864}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.711353}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.543864}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.711353}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.543864}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.711353}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.039394378662109375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016865730285644531 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.615194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.767961}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967194}, "timestamp": {"timestamp": 1683216489.615194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997093}, "timestamp": {"timestamp": 1683553255.767961}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.615194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.767961}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.615194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.767961}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.615194}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.767961}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02265310287475586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010297298431396484 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.693524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.797989}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996734}, "timestamp": {"timestamp": 1683216489.693524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99971074}, "timestamp": {"timestamp": 1683553255.797989}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.693524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.797989}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.693524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.797989}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.693524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.797989}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026480436325073242 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:18590:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '18590', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011260509490966797 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.751179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.831674}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996749}, "timestamp": {"timestamp": 1683216489.751179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997122}, "timestamp": {"timestamp": 1683553255.831674}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.751179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.831674}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.751179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.831674}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.751179}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.831674}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server -INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014998912811279297 seconds -INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.037625789642333984 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} +INFO:root:No attack detected DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.823236}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.875934}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996764}, "timestamp": {"timestamp": 1683216489.823236}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970293}, "timestamp": {"timestamp": 1683553255.875934}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.823236}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.875934}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.823236}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.875934}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.823236}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.875934}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03372359275817871 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019218921661376953 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.979731}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.916719}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683216489.979731}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996916}, "timestamp": {"timestamp": 1683553255.916719}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.979731}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.916719}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.979731}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.916719}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216489.979731}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.916719}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02311539649963379 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012426376342773438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0007715225219726562 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 21 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.049339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.960614}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996793}, "timestamp": {"timestamp": 1683216490.049339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996811}, "timestamp": {"timestamp": 1683553255.960614}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.049339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.960614}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.049339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.960614}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.049339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.960614}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025259017944335938 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011820793151855469 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.108119}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.996483}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996808}, "timestamp": {"timestamp": 1683216490.108119}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996827}, "timestamp": {"timestamp": 1683553255.996483}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.108119}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.996483}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.108119}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.996483}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.108119}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553255.996483}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028977632522583008 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009794235229492188 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.149077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.039094}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968225}, "timestamp": {"timestamp": 1683216490.149077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996843}, "timestamp": {"timestamp": 1683553256.039094}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.149077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.039094}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.149077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.039094}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.149077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.039094}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0301358699798584 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010128021240234375 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.208178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.081075}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996836}, "timestamp": {"timestamp": 1683216490.208178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996858}, "timestamp": {"timestamp": 1683553256.081075}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.208178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.081075}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.208178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.081075}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.208178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.081075}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0292356014251709 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016603469848632812 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.296088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.11982}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968505}, "timestamp": {"timestamp": 1683216490.296088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996874}, "timestamp": {"timestamp": 1683553256.11982}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.296088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.11982}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.296088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.11982}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.296088}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.11982}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04352140426635742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011227130889892578 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.346892}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.170652}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996864}, "timestamp": {"timestamp": 1683216490.346892}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996889}, "timestamp": {"timestamp": 1683553256.170652}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.346892}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.170652}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.346892}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.170652}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.346892}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.170652}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027340173721313477 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011081695556640625 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.417258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.205716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968785}, "timestamp": {"timestamp": 1683216490.417258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996904}, "timestamp": {"timestamp": 1683553256.205716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.417258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.205716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.417258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.205716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.417258}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.205716}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034680843353271484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009055137634277344 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.447282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.24896}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996798}, "timestamp": {"timestamp": 1683216490.447282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996919}, "timestamp": {"timestamp": 1683553256.24896}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.447282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.24896}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.447282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.24896}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.447282}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.24896}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024171113967895508 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014789104461669922 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.516097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.280339}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996701}, "timestamp": {"timestamp": 1683216490.516097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996934}, "timestamp": {"timestamp": 1683553256.280339}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.516097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.280339}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.516097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.280339}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.516097}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.280339}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02845478057861328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013222694396972656 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.608341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.316302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996611}, "timestamp": {"timestamp": 1683216490.608341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996948}, "timestamp": {"timestamp": 1683553256.316302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.608341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.316302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.608341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.316302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.608341}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.316302}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025214195251464844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:55', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012538433074951172 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009000301361083984 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 22 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.654447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.430089}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996626}, "timestamp": {"timestamp": 1683216490.654447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996963}, "timestamp": {"timestamp": 1683553256.430089}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.654447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.430089}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.654447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.430089}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.654447}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.430089}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03370308876037598 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0016262531280517578 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.737829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.479433}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999664}, "timestamp": {"timestamp": 1683216490.737829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969774}, "timestamp": {"timestamp": 1683553256.479433}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.737829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.479433}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.737829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.479433}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.737829}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.479433}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03011155128479004 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013971328735351562 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.797402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.520825}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966544}, "timestamp": {"timestamp": 1683216490.797402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996992}, "timestamp": {"timestamp": 1683553256.520825}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.797402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.520825}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.797402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.520825}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.797402}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.520825}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029552221298217773 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001323699951171875 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.845592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.563396}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966687}, "timestamp": {"timestamp": 1683216490.845592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969053}, "timestamp": {"timestamp": 1683553256.563396}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.845592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.563396}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.845592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.563396}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.845592}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.563396}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02569723129272461 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014050006866455078 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.905591}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.598656}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996683}, "timestamp": {"timestamp": 1683216490.905591}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996801}, "timestamp": {"timestamp": 1683553256.598656}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.905591}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.598656}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.905591}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.598656}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.905591}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.598656}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022471189498901367 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014050006866455078 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.994787}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.634384}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966973}, "timestamp": {"timestamp": 1683216490.994787}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996704}, "timestamp": {"timestamp": 1683553256.634384}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.994787}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.634384}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.994787}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.634384}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216490.994787}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.634384}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02679610252380371 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010318756103515625 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.030078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.669012}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996711}, "timestamp": {"timestamp": 1683216491.030078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967194}, "timestamp": {"timestamp": 1683553256.669012}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.030078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.669012}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.030078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.669012}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.030078}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.669012}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022234201431274414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013186931610107422 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.115707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.698695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996725}, "timestamp": {"timestamp": 1683216491.115707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996734}, "timestamp": {"timestamp": 1683553256.698695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.115707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.698695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.115707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.698695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.115707}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.698695}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04025864601135254 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001207590103149414 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.186869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.747328}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967384}, "timestamp": {"timestamp": 1683216491.186869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996749}, "timestamp": {"timestamp": 1683553256.747328}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.186869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.747328}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.186869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.747328}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.186869}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.747328}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024054288864135742 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001331329345703125 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.346262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.778351}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996752}, "timestamp": {"timestamp": 1683216491.346262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996764}, "timestamp": {"timestamp": 1683553256.778351}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.346262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.778351}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.346262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.778351}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.346262}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.778351}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03200125694274902 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001514434814453125 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1544.0}, {"feature": 3.0}, {"feature": 1544.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010733604431152344 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 23 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.385566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.913077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996766}, "timestamp": {"timestamp": 1683216491.385566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683553256.913077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.385566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.913077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.385566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.913077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.385566}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.913077}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026620864868164062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014810562133789062 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.427681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.949026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683216491.427681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996793}, "timestamp": {"timestamp": 1683553256.949026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.427681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.949026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.427681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.949026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.427681}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.949026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023622512817382812 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012736320495605469 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.492226}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.983033}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967045}, "timestamp": {"timestamp": 1683216491.492226}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996808}, "timestamp": {"timestamp": 1683553256.983033}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.492226}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.983033}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.492226}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.983033}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.492226}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553256.983033}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02718830108642578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011348724365234375 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.546049}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.029573}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996613}, "timestamp": {"timestamp": 1683216491.546049}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968225}, "timestamp": {"timestamp": 1683553257.029573}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.546049}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.029573}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.546049}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.029573}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.546049}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.029573}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03438901901245117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011053085327148438 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.599614}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.074205}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996529}, "timestamp": {"timestamp": 1683216491.599614}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996836}, "timestamp": {"timestamp": 1683553257.074205}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.599614}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.074205}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.599614}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.074205}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.599614}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.074205}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03938937187194824 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010890960693359375 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.651936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.123013}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965435}, "timestamp": {"timestamp": 1683216491.651936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968505}, "timestamp": {"timestamp": 1683553257.123013}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.651936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.123013}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.651936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.123013}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.651936}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.123013}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03371119499206543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011327266693115234 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.711208}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.165839}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996471}, "timestamp": {"timestamp": 1683216491.711208}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996864}, "timestamp": {"timestamp": 1683553257.165839}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.711208}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.165839}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.711208}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.165839}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.711208}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.165839}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03238391876220703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012722015380859375 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.762043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.205607}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996485}, "timestamp": {"timestamp": 1683216491.762043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968785}, "timestamp": {"timestamp": 1683553257.205607}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.762043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.205607}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.762043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.205607}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.762043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.205607}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.030476808547973633 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010685920715332031 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.80639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.245863}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964994}, "timestamp": {"timestamp": 1683216491.80639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996798}, "timestamp": {"timestamp": 1683553257.245863}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.80639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.245863}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.80639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.245863}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.80639}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.245863}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029252052307128906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009453296661376953 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.840178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.281422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996513}, "timestamp": {"timestamp": 1683216491.840178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996701}, "timestamp": {"timestamp": 1683553257.281422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.840178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.281422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.840178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.281422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.840178}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.281422}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024911880493164062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:56', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0024094581604003906 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010955333709716797 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 24 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.918452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.331634}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996527}, "timestamp": {"timestamp": 1683216491.918452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996611}, "timestamp": {"timestamp": 1683553257.331634}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.918452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.331634}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.918452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.331634}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.918452}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.331634}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028191089630126953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010445117950439453 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.991232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.376638}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965405}, "timestamp": {"timestamp": 1683216491.991232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996626}, "timestamp": {"timestamp": 1683553257.376638}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.991232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.376638}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.991232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.376638}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216491.991232}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.376638}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04506707191467285 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009539127349853516 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.024837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.432502}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996554}, "timestamp": {"timestamp": 1683216492.024837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999664}, "timestamp": {"timestamp": 1683553257.432502}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.024837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.432502}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.024837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.432502}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.024837}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.432502}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04331159591674805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012197494506835938 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.124621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.491334}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996568}, "timestamp": {"timestamp": 1683216492.124621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966544}, "timestamp": {"timestamp": 1683553257.491334}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.124621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.491334}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.124621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.491334}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.124621}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.491334}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.024518489837646484 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012857913970947266 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.202077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.524702}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965817}, "timestamp": {"timestamp": 1683216492.202077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966687}, "timestamp": {"timestamp": 1683553257.524702}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.202077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.524702}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.202077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.524702}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.202077}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.524702}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025404691696166992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.03618955612182617 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.298297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.559311}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996595}, "timestamp": {"timestamp": 1683216492.298297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996683}, "timestamp": {"timestamp": 1683553257.559311}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.298297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.559311}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.298297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.559311}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.298297}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.559311}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.019849538803100586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011289119720458984 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.367253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.587719}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996608}, "timestamp": {"timestamp": 1683216492.367253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966973}, "timestamp": {"timestamp": 1683553257.587719}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.367253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.587719}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.367253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.587719}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.367253}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.587719}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02007317543029785 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020101070404052734 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.429168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.61642}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996621}, "timestamp": {"timestamp": 1683216492.429168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996711}, "timestamp": {"timestamp": 1683553257.61642}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.429168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.61642}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.429168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.61642}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.429168}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.61642}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02577662467956543 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014412403106689453 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.500754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.650865}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996634}, "timestamp": {"timestamp": 1683216492.500754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996725}, "timestamp": {"timestamp": 1683553257.650865}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.500754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.650865}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.500754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.650865}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.500754}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.650865}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029340505599975586 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001318216323852539 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.560383}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.688681}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996647}, "timestamp": {"timestamp": 1683216492.560383}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967384}, "timestamp": {"timestamp": 1683553257.688681}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.560383}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.688681}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.560383}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.688681}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.560383}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.688681}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02268385887145996 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013613700866699219 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:13309:192.168.1.198:443", "ip_d": "192.168.1.198", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "13309", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011768341064453125 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 25 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.640448}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.89643}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966604}, "timestamp": {"timestamp": 1683216492.640448}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996752}, "timestamp": {"timestamp": 1683553257.89643}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.640448}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.89643}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.640448}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.89643}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.640448}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.89643}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02933192253112793 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019001960754394531 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.748941}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.934226}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996673}, "timestamp": {"timestamp": 1683216492.748941}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996766}, "timestamp": {"timestamp": 1683553257.934226}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.748941}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.934226}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.748941}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.934226}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.748941}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.934226}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03586006164550781 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001108407974243164 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.830727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.98151}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966854}, "timestamp": {"timestamp": 1683216492.830727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996779}, "timestamp": {"timestamp": 1683553257.98151}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.830727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.98151}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.830727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.98151}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.830727}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553257.98151}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.033731698989868164 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010764598846435547 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.875524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.022939}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996698}, "timestamp": {"timestamp": 1683216492.875524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967045}, "timestamp": {"timestamp": 1683553258.022939}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.875524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.022939}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.875524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.022939}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.875524}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.022939}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023122310638427734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9974504113197327, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020041465759277344 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.927075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.053772}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967104}, "timestamp": {"timestamp": 1683216492.927075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996613}, "timestamp": {"timestamp": 1683553258.053772}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.927075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.053772}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.927075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.053772}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216492.927075}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.053772}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025694608688354492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9975987672805786, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012664794921875 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.016429}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.087046}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996723}, "timestamp": {"timestamp": 1683216493.016429}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996529}, "timestamp": {"timestamp": 1683553258.087046}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.016429}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.087046}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.016429}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.087046}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.016429}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.087046}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0326387882232666 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012118816375732422 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.107339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.127365}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967355}, "timestamp": {"timestamp": 1683216493.107339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965435}, "timestamp": {"timestamp": 1683553258.127365}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.107339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.127365}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.107339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.127365}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.107339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.127365}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02289891242980957 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 0.9978645443916321, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.198', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:13309:192.168.1.198:443', 'protocol': 'TCP', 'port_o': '13309', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012485980987548828 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.163457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.157247}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967474}, "timestamp": {"timestamp": 1683216493.163457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996471}, "timestamp": {"timestamp": 1683553258.157247}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.163457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.157247}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.163457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.157247}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.163457}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.157247}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02433490753173828 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001222848892211914 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.243969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.188532}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996759}, "timestamp": {"timestamp": 1683216493.243969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996485}, "timestamp": {"timestamp": 1683553258.188532}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.243969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.188532}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.243969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.188532}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.243969}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.188532}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.022047758102416992 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011758804321289062 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.32438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.218023}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996771}, "timestamp": {"timestamp": 1683216493.32438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99964994}, "timestamp": {"timestamp": 1683553258.218023}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.32438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.218023}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.32438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.218023}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.32438}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.218023}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026909351348876953 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:57', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011246204376220703 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012547969818115234 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 26 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.38177}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.283094}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996783}, "timestamp": {"timestamp": 1683216493.38177}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996513}, "timestamp": {"timestamp": 1683553258.283094}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.38177}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.283094}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.38177}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.283094}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.38177}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.283094}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05469775199890137 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0020248889923095703 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.438398}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.348485}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996795}, "timestamp": {"timestamp": 1683216493.438398}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996527}, "timestamp": {"timestamp": 1683553258.348485}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.438398}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.348485}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.438398}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.348485}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.438398}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.348485}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03923940658569336 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012867450714111328 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.49339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.398394}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996807}, "timestamp": {"timestamp": 1683216493.49339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965405}, "timestamp": {"timestamp": 1683553258.398394}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.49339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.398394}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.49339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.398394}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.49339}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.398394}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028591632843017578 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.007242441177368164 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.562318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.435522}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968183}, "timestamp": {"timestamp": 1683216493.562318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996554}, "timestamp": {"timestamp": 1683553258.435522}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.562318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.435522}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.562318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.435522}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.562318}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.435522}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027963638305664062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012629032135009766 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.626646}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.477505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999683}, "timestamp": {"timestamp": 1683216493.626646}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996568}, "timestamp": {"timestamp": 1683553258.477505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.626646}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.477505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.626646}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.477505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.626646}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.477505}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026907682418823242 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013155937194824219 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.714974}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.51189}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968415}, "timestamp": {"timestamp": 1683216493.714974}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99965817}, "timestamp": {"timestamp": 1683553258.51189}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.714974}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.51189}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.714974}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.51189}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.714974}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.51189}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027846574783325195 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001226663589477539 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.766404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.547096}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996853}, "timestamp": {"timestamp": 1683216493.766404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996595}, "timestamp": {"timestamp": 1683553258.547096}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.766404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.547096}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.766404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.547096}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.766404}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.547096}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029728174209594727 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011806488037109375 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.851287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.585016}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996864}, "timestamp": {"timestamp": 1683216493.851287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996608}, "timestamp": {"timestamp": 1683553258.585016}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.851287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.585016}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.851287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.585016}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.851287}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.585016}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027135848999023438 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.004812717437744141 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.902838}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.619325}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968755}, "timestamp": {"timestamp": 1683216493.902838}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996621}, "timestamp": {"timestamp": 1683553258.619325}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.902838}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.619325}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.902838}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.619325}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.902838}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.619325}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02506256103515625 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011796951293945312 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.962909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.651938}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996887}, "timestamp": {"timestamp": 1683216493.962909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996634}, "timestamp": {"timestamp": 1683553258.651938}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.962909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.651938}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.962909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.651938}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216493.962909}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.651938}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03114485740661621 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.003162860870361328 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010952949523925781 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 27 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.018002}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.715082}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968976}, "timestamp": {"timestamp": 1683216494.018002}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996647}, "timestamp": {"timestamp": 1683553258.715082}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.018002}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.715082}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.018002}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.715082}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.018002}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.715082}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.04009842872619629 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012340545654296875 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.083938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.764779}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996909}, "timestamp": {"timestamp": 1683216494.083938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966604}, "timestamp": {"timestamp": 1683553258.764779}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.083938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.764779}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.083938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.764779}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.083938}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.764779}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029852867126464844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011577606201171875 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.154618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.802478}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969196}, "timestamp": {"timestamp": 1683216494.154618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996673}, "timestamp": {"timestamp": 1683553258.802478}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.154618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.802478}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.154618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.802478}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.154618}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.802478}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02404499053955078 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001127004623413086 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.203043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.835506}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969304}, "timestamp": {"timestamp": 1683216494.203043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99966854}, "timestamp": {"timestamp": 1683553258.835506}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.203043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.835506}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.203043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.835506}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.203043}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.835506}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.034169673919677734 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001172780990600586 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.242852}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.877194}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996941}, "timestamp": {"timestamp": 1683216494.242852}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996698}, "timestamp": {"timestamp": 1683553258.877194}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.242852}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.877194}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.242852}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.877194}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.242852}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.877194}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03769040107727051 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011320114135742188 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.326162}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.921669}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996952}, "timestamp": {"timestamp": 1683216494.326162}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967104}, "timestamp": {"timestamp": 1683553258.921669}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.326162}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.921669}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.326162}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.921669}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.326162}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.921669}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.025279760360717773 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001107931137084961 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.470658}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.953902}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969625}, "timestamp": {"timestamp": 1683216494.470658}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996723}, "timestamp": {"timestamp": 1683553258.953902}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.470658}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.953902}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.470658}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.953902}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.470658}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.953902}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.0241701602935791 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012090206146240234 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.530212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.98519}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996973}, "timestamp": {"timestamp": 1683216494.530212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967355}, "timestamp": {"timestamp": 1683553258.98519}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.530212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.98519}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.530212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.98519}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.530212}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553258.98519}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.032323360443115234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010364055633544922 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.575323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.02441}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996984}, "timestamp": {"timestamp": 1683216494.575323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99967474}, "timestamp": {"timestamp": 1683553259.02441}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.575323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.02441}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.575323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.02441}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.575323}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.02441}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03733015060424805 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012030601501464844 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.816573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.068818}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996994}, "timestamp": {"timestamp": 1683216494.816573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996759}, "timestamp": {"timestamp": 1683553259.068818}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.816573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.068818}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.816573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.068818}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.816573}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.068818}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.06279683113098145 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:58', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011022090911865234 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 6.0}, {"feature": 4314.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:14825:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "14825", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1516.0}, {"feature": 3.0}, {"feature": 1516.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.001066446304321289 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 28 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.884121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.153891}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997004}, "timestamp": {"timestamp": 1683216494.884121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996771}, "timestamp": {"timestamp": 1683553259.153891}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.884121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.153891}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.884121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.153891}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.884121}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.153891}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.026487112045288086 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 11.0}, {"feature": 10.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 15.0}, {"feature": 15.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011315345764160156 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.969006}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.188849}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99970144}, "timestamp": {"timestamp": 1683216494.969006}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996783}, "timestamp": {"timestamp": 1683553259.188849}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.969006}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.188849}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.969006}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.188849}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216494.969006}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.188849}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.028841018676757812 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019478797912597656 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.061728}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.225284}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9997025}, "timestamp": {"timestamp": 1683216495.061728}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996795}, "timestamp": {"timestamp": 1683553259.225284}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.061728}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.225284}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.061728}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.225284}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.061728}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.225284}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023772001266479492 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.011580228805541992 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.142743}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.257844}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969625}, "timestamp": {"timestamp": 1683216495.142743}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996807}, "timestamp": {"timestamp": 1683553259.257844}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.142743}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.257844}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.142743}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.257844}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.142743}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.257844}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02006816864013672 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 2.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.009664535522460938 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.198879}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.284773}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996886}, "timestamp": {"timestamp": 1683216495.198879}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968183}, "timestamp": {"timestamp": 1683553259.284773}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.198879}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.284773}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.198879}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.284773}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.198879}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.284773}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023339509963989258 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 1.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005602121353149414 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.282113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.314955}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996816}, "timestamp": {"timestamp": 1683216495.282113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999683}, "timestamp": {"timestamp": 1683553259.314955}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.282113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.314955}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.282113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.314955}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.282113}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.314955}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03175973892211914 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 2.0}, {"feature": 2.0}, {"feature": 0.0}, {"feature": 0.0}, {"feature": 0.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0014576911926269531 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.321865}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.36026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968266}, "timestamp": {"timestamp": 1683216495.321865}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968415}, "timestamp": {"timestamp": 1683553259.36026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.321865}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.36026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.321865}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.36026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.321865}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.36026}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027255535125732422 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:14825:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '14825', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 3.0}, {"feature": 2.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009906291961669922 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.39275}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.394397}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996837}, "timestamp": {"timestamp": 1683216495.39275}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996853}, "timestamp": {"timestamp": 1683553259.394397}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.39275}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.394397}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.39275}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.394397}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.39275}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.394397}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.029073715209960938 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 4.0}, {"feature": 3.0}, {"feature": 202.0}, {"feature": 1.0}, {"feature": 202.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.02037668228149414 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.48641}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.430446}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968475}, "timestamp": {"timestamp": 1683216495.48641}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996864}, "timestamp": {"timestamp": 1683553259.430446}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.48641}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.430446}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.48641}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.430446}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.48641}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.430446}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.01906585693359375 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 3.0}, {"feature": 3.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012209415435791016 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.558117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.45676}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996858}, "timestamp": {"timestamp": 1683216495.558117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968755}, "timestamp": {"timestamp": 1683553259.45676}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.558117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.45676}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.558117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.45676}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.558117}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.45676}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.02422809600830078 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 4.0}, {"feature": 4.0}, {"feature": 1123.0}, {"feature": 1.0}, {"feature": 1123.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0017418861389160156 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:23418:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "23418", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 2812.0}, {"feature": 4.0}, {"feature": 2812.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:12221:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "12221", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1548.0}, {"feature": 3.0}, {"feature": 1548.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 11.0}, {"feature": 11.0}, {"feature": 2744.0}, {"feature": 7.0}, {"feature": 5662.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:42462:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "42462", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1593.0}, {"feature": 3.0}, {"feature": 1593.0}, {"feature": 12.0}, {"feature": 12.0}, {"feature": 2744.0}, {"feature": 8.0}, {"feature": 5884.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 13.0}, {"feature": 13.0}, {"feature": 2744.0}, {"feature": 9.0}, {"feature": 7232.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 9.0}, {"feature": 8.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received"} +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:45812:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "45812", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "add16ef9-0593-433a-a563-28bb517fd32e"}}, "time_end": 1683553300.0, "time_start": 1683553300.0}, "features": [{"feature": 10.0}, {"feature": 9.0}, {"feature": 1511.0}, {"feature": 3.0}, {"feature": 1511.0}, {"feature": 14.0}, {"feature": 14.0}, {"feature": 2744.0}, {"feature": 10.0}, {"feature": 7454.0}]} +DEBUG:root:Performing inference... 3348781e-8065-4f1d-825a-bd66635f762e +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:x_data.shape: (10, 10) +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0005459785461425781 seconds INFO:root:Inference performed correctly - +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:inference_results length: 29 DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.624125}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.497707}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968684}, "timestamp": {"timestamp": 1683216495.624125}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996887}, "timestamp": {"timestamp": 1683553259.497707}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.624125}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.497707}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.624125}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.497707}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.624125}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.497707}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.018679380416870117 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:23418:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '23418', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 5.0}, {"feature": 4.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0019576549530029297 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.710489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.52376}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996879}, "timestamp": {"timestamp": 1683216495.710489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968976}, "timestamp": {"timestamp": 1683553259.52376}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.710489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.52376}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.710489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.52376}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.710489}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.52376}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023752212524414062 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 6.0}, {"feature": 5.0}, {"feature": 328.0}, {"feature": 2.0}, {"feature": 328.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010304450988769531 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.776788}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.558395}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996889}, "timestamp": {"timestamp": 1683216495.776788}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996909}, "timestamp": {"timestamp": 1683553259.558395}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.776788}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.558395}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.776788}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.558395}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.776788}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.558395}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.027259111404418945 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 5.0}, {"feature": 5.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0009434223175048828 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.830866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.594035}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99968994}, "timestamp": {"timestamp": 1683216495.830866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969196}, "timestamp": {"timestamp": 1683553259.594035}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.830866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.594035}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.830866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.594035}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.830866}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.594035}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05560445785522461 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:12221:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '12221', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 6.0}, {"feature": 6.0}, {"feature": 1174.0}, {"feature": 2.0}, {"feature": 1174.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0012848377227783203 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.916251}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.658189}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969095}, "timestamp": {"timestamp": 1683216495.916251}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969304}, "timestamp": {"timestamp": 1683553259.658189}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.916251}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.658189}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.916251}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.658189}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.916251}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.658189}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.07168793678283691 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 7.0}, {"feature": 7.0}, {"feature": 2522.0}, {"feature": 3.0}, {"feature": 2522.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.005235195159912109 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.974314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.737185}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969196}, "timestamp": {"timestamp": 1683216495.974314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996941}, "timestamp": {"timestamp": 1683553259.737185}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.974314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.737185}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.974314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.737185}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216495.974314}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.737185}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03689455986022949 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 7.0}, {"feature": 6.0}, {"feature": 1616.0}, {"feature": 3.0}, {"feature": 1616.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0011267662048339844 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.025109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.782203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999693}, "timestamp": {"timestamp": 1683216496.025109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996952}, "timestamp": {"timestamp": 1683553259.782203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.025109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.782203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.025109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.782203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.025109}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.782203}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.05208897590637207 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:42462:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '42462', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 8.0}, {"feature": 8.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010592937469482422 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.073441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.843346}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.999694}, "timestamp": {"timestamp": 1683216496.073441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969625}, "timestamp": {"timestamp": 1683553259.843346}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.073441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.843346}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.073441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.843346}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.073441}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.843346}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03180503845214844 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 9.0}, {"feature": 9.0}, {"feature": 2744.0}, {"feature": 4.0}, {"feature": 2744.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0010249614715576172 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.125704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.883214}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969494}, "timestamp": {"timestamp": 1683216496.125704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996973}, "timestamp": {"timestamp": 1683553259.883214}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.125704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.883214}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.125704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.883214}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.125704}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.883214}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.03542828559875488 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} INFO:root:No attack detected -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, information received (no attack detected)"} -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics request: {"connection_metadata": {"endpoint_id": {"device_id": {"device_uuid": {"uuid": "ed2388eb-5fb9-5888-a4f4-160267d3e19b"}}, "endpoint_uuid": {"uuid": "ff900d5d-2ac0-576c-9628-a2d016681f9d"}, "topology_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "topology_uuid": {"uuid": "c76135e3-24a8-5e92-9bed-c3c9139359c8"}}}, "flow_id": "10.100.200.3:24408:192.168.1.197:443", "ip_d": "192.168.1.197", "ip_o": "10.100.200.3", "port_d": "443", "port_o": "24408", "protocol": "TCP", "service_id": {"context_id": {"context_uuid": {"uuid": "43813baf-195e-5da6-af20-b3d0922e71a7"}}, "service_uuid": {"uuid": "735a8309-93c5-4d18-82be-6ffe12d821a9"}}, "time_end": 1683216500.0, "time_start": 1683216500.0}, "features": [{"feature": 8.0}, {"feature": 7.0}, {"feature": 2824.0}, {"feature": 4.0}, {"feature": 2824.0}, {"feature": 10.0}, {"feature": 10.0}, {"feature": 2744.0}, {"feature": 5.0}, {"feature": 4092.0}]} -INFO:root:Performing inference... -DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Inference performed in 0.0013508796691894531 seconds -INFO:root:Inference performed correctly - DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Sending KPIs to monitoring server -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.189478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "17"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.925947}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.99969596}, "timestamp": {"timestamp": 1683216496.189478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "18"}}, "kpi_value": {"floatVal": 0.9996984}, "timestamp": {"timestamp": 1683553259.925947}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.189478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "19"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.925947}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.189478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "20"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.925947}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} -DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683216496.189478}} +DEBUG:monitoring.client.MonitoringClient:IncludeKpi: {"kpi_id": {"kpi_id": {"uuid": "21"}}, "kpi_value": {"int32Val": 0}, "timestamp": {"timestamp": 1683553259.925947}} DEBUG:monitoring.client.MonitoringClient:IncludeKpi result: {} DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:KPIs sent to monitoring server +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:Monitoring KPIs performed in 0.023393869400024414 seconds +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:cryptomining_detector_output: {'confidence': 1.0, 'timestamp': '08/05/2023 13:40:59', 'ip_o': '10.100.200.3', 'ip_d': '192.168.1.197', 'tag_name': 'Normal', 'tag': 0, 'flow_id': '10.100.200.3:45812:192.168.1.197:443', 'protocol': 'TCP', 'port_o': '45812', 'port_d': '443', 'ml_id': 'crypto_5g_rf_spider_features.onnx', 'service_id': context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } +} +service_uuid { + uuid: "add16ef9-0593-433a-a563-28bb517fd32e" +} +, 'endpoint_id': topology_id { + context_id { + context_uuid { + uuid: "43813baf-195e-5da6-af20-b3d0922e71a7" + } + } + topology_uuid { + uuid: "c76135e3-24a8-5e92-9bed-c3c9139359c8" + } +} +device_id { + device_uuid { + uuid: "ed2388eb-5fb9-5888-a4f4-160267d3e19b" + } +} +endpoint_uuid { + uuid: "ff900d5d-2ac0-576c-9628-a2d016681f9d" +} +, 'time_start': 1683553280.0, 'time_end': 1683553280.0} +INFO:root:No attack detected +DEBUG:l3_centralizedattackdetector.service.l3_centralizedattackdetectorServiceServicerImpl:AnalyzeConnectionStatistics reply: {"message": "Ok, metrics processed"} diff --git a/manifests/l3_attackmitigatorservice.yaml b/manifests/l3_attackmitigatorservice.yaml index 40f4914ad60785eced4d15eefcb7f9c9ca64543d..ca27b1e3f740562243492713cc4f5fe6df193aee 100644 --- a/manifests/l3_attackmitigatorservice.yaml +++ b/manifests/l3_attackmitigatorservice.yaml @@ -71,29 +71,6 @@ spec: strategy: type: Recreate ---- -apiVersion: autoscaling/v2 -kind: HorizontalPodAutoscaler -metadata: - name: l3-attackmitigatorservice-hpa -spec: - scaleTargetRef: - apiVersion: apps/v1 - kind: Deployment - name: l3-attackmitigatorservice - minReplicas: 1 - maxReplicas: 10 - metrics: - - type: Resource - resource: - name: cpu - target: - type: Utilization - averageUtilization: 80 - behavior: - scaleDown: - stabilizationWindowSeconds: 120 - --- apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor diff --git a/manifests/l3_centralizedattackdetectorservice.yaml b/manifests/l3_centralizedattackdetectorservice.yaml index 0432f20897391a843418fd61c8d6a14dad970c49..6f5c307c9b1f74471966ab028a9500a02bbb4fd7 100644 --- a/manifests/l3_centralizedattackdetectorservice.yaml +++ b/manifests/l3_centralizedattackdetectorservice.yaml @@ -70,29 +70,6 @@ spec: targetPort: 10001 strategy: type: Recreate - ---- -apiVersion: autoscaling/v2 -kind: HorizontalPodAutoscaler -metadata: - name: l3-centralizedattackdetectorservice-hpa -spec: - scaleTargetRef: - apiVersion: apps/v1 - kind: Deployment - name: l3-centralizedattackdetectorservice - minReplicas: 1 - maxReplicas: 10 - metrics: - - type: Resource - resource: - name: cpu - target: - type: Utilization - averageUtilization: 80 - behavior: - scaleDown: - stabilizationWindowSeconds: 120 --- apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor diff --git a/scalability_accuracy.csv b/scalability_accuracy.csv index 85fb6d6cb0cecd654eb055ea6009eceb2e806cdf..41640c4d91f614b3a68326f1c064c63e234f84a0 100644 --- a/scalability_accuracy.csv +++ b/scalability_accuracy.csv @@ -1 +1 @@ -60.0 0.4998282492160797 0.9989699125289917 0.5 0.4996565878391266 0.5 0.9993131756782532 0.0 4369.0 0.0 0.0 4369.0 3.0 0.9999995827674866 04/05/2023-15:08:07 04/05/2023-15:20:07 12.0 +30.0 1.0 1.0 1.0 1.0 1.0 1.0 0.0 2339.0 0.0 0.0 2339.0 0.0 0.9978645443916321 08/05/2023-13:40:46 08/05/2023-13:42:46 2.0 diff --git a/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py b/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py index bd209633f28428c60a7f0c4f5dc4a4c7c3515d61..e327b3a53a66e7419f1e42812b48128d4d9b0f3a 100644 --- a/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py +++ b/src/l3_centralizedattackdetector/service/l3_centralizedattackdetectorServiceServicerImpl.py @@ -55,6 +55,7 @@ current_dir = os.path.dirname(os.path.abspath(__file__)) # Demo constants DEMO_MODE = True ATTACK_IPS = ["37.187.95.110", "91.121.140.167", "94.23.23.52", "94.23.247.226", "149.202.83.171"] +BATCH_SIZE= 10 TIME_START = time.time() METRICS_POOL = MetricsPool('l3_centralizedattackdetector', 'RPC') @@ -125,6 +126,8 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto self.l3_unique_attackers = 0 self.l3_non_empty_time_interval = False + + self.active_requests = [] self.monitoring_client = MonitoringClient() self.service_ids = [] @@ -201,6 +204,8 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto self.precision_score = Value('f', 0) self.recall_score = Value('f', 0) + self.replica_uuid = uuid.uuid4() + self.y_true = [] self.y_pred = [] @@ -398,18 +403,18 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto -output: L3AttackmitigatorOutput object with information about the assigned class and prediction confidence """ - def perform_inference(self, request): - x_data = np.array([[feature.feature for feature in request.features]]) + def perform_distributed_inference(self, requests): + batch_size = len(requests) - # Print input data shape - #LOGGER.debug("x_data.shape: {}".format(x_data.shape)) + # Create an empty array to hold the input data + x_data = np.empty((batch_size, len(requests[0].features))) - # Get batch size - batch_size = x_data.shape[0] + # Fill in the input data array with features from each request + for i, request in enumerate(requests): + x_data[i] = [feature.feature for feature in request.features] - # Print batch size - #LOGGER.debug("batch_size: {}".format(batch_size)) - #LOGGER.debug("x_data.shape: {}".format(x_data.shape)) + # Print input data shape + LOGGER.debug("x_data.shape: {}".format(x_data.shape)) inference_time_start = time.perf_counter() @@ -434,11 +439,11 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto std_inference_time = np.std(inference_times_np_array) median_inference_time = np.median(inference_times_np_array) - '''LOGGER.debug("Average inference time: {}".format(avg_inference_time)) + LOGGER.debug("Average inference time: {}".format(avg_inference_time)) LOGGER.debug("Max inference time: {}".format(max_inference_time)) LOGGER.debug("Min inference time: {}".format(min_inference_time)) LOGGER.debug("Standard deviation inference time: {}".format(std_inference_time)) - LOGGER.debug("Median inference time: {}".format(median_inference_time))''' + LOGGER.debug("Median inference time: {}".format(median_inference_time)) with open(f"inference_times_stats_{batch_size}.txt", "w") as f: f.write("Average inference time: {}\n".format(avg_inference_time)) @@ -448,34 +453,36 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto f.write("Median inference time: {}\n".format(median_inference_time)) # Gather the predicted class, the probability of that class and other relevant information required to block the attack - output_message = { - "confidence": None, - "timestamp": datetime.now().strftime("%d/%m/%Y %H:%M:%S"), - "ip_o": request.connection_metadata.ip_o, - "ip_d": request.connection_metadata.ip_d, - "tag_name": None, - "tag": None, - "flow_id": request.connection_metadata.flow_id, - "protocol": request.connection_metadata.protocol, - "port_o": request.connection_metadata.port_o, - "port_d": request.connection_metadata.port_d, - "ml_id": self.cryptomining_detector_file_name, - "service_id": request.connection_metadata.service_id, - "endpoint_id": request.connection_metadata.endpoint_id, - "time_start": request.connection_metadata.time_start, - "time_end": request.connection_metadata.time_end, - } - - if predictions[0][1] >= self.CLASSIFICATION_THRESHOLD: - output_message["confidence"] = predictions[0][1] - output_message["tag_name"] = "Crypto" - output_message["tag"] = self.CRYPTO_CLASS - else: - output_message["confidence"] = predictions[0][0] - output_message["tag_name"] = "Normal" - output_message["tag"] = self.NORMAL_CLASS + output_messages = [] + for i, request in enumerate(requests): + output_messages.append({ + "confidence": None, + "timestamp": datetime.now().strftime("%d/%m/%Y %H:%M:%S"), + "ip_o": request.connection_metadata.ip_o, + "ip_d": request.connection_metadata.ip_d, + "tag_name": None, + "tag": None, + "flow_id": request.connection_metadata.flow_id, + "protocol": request.connection_metadata.protocol, + "port_o": request.connection_metadata.port_o, + "port_d": request.connection_metadata.port_d, + "ml_id": self.cryptomining_detector_file_name, + "service_id": request.connection_metadata.service_id, + "endpoint_id": request.connection_metadata.endpoint_id, + "time_start": request.connection_metadata.time_start, + "time_end": request.connection_metadata.time_end, + }) + + if predictions[i][1] >= self.CLASSIFICATION_THRESHOLD: + output_messages[i]["confidence"] = predictions[i][1] + output_messages[i]["tag_name"] = "Crypto" + output_messages[i]["tag"] = self.CRYPTO_CLASS + else: + output_messages[i]["confidence"] = predictions[i][0] + output_messages[i]["tag_name"] = "Normal" + output_messages[i]["tag"] = self.NORMAL_CLASS - return output_message + return output_messages """ Receive features from Attack Mitigator, predict attack and communicate with Attack Mitigator @@ -486,157 +493,176 @@ class l3_centralizedattackdetectorServiceServicerImpl(L3Centralizedattackdetecto @safe_and_metered_rpc_method(METRICS_POOL, LOGGER) def AnalyzeConnectionStatistics(self, request, context): # Perform inference with the data sent in the request - logging.info("\nPerforming inference...") + self.active_requests.append(request) - inference_time_start = time.time() - cryptomining_detector_output = self.perform_inference(request) - inference_time_end = time.time() + if len(self.active_requests) == BATCH_SIZE: + csv_file_path = 'hola_mundo.csv' - LOGGER.debug("Inference performed in {} seconds".format(inference_time_end - inference_time_start)) - logging.info("Inference performed correctly\n") - - self.inference_results.append({"output": cryptomining_detector_output, "timestamp": datetime.now()}) - #LOGGER.debug("inference_results length: {}".format(len(self.inference_results))) - - service_id = request.connection_metadata.service_id - device_id = request.connection_metadata.endpoint_id.device_id - endpoint_id = request.connection_metadata.endpoint_id - - # Check if a request of a new service has been received and, if so, create the monitored KPIs for that service - if service_id not in self.service_ids: - self.create_kpis(service_id, device_id, endpoint_id) - self.service_ids.append(service_id) - - monitor_kpis_start = time.time() - self.monitor_kpis() - monitor_kpis_end = time.time() - - '''LOGGER.debug("Monitoring KPIs performed in {} seconds".format(monitor_kpis_end - monitor_kpis_start)) - LOGGER.debug("cryptomining_detector_output: {}".format(cryptomining_detector_output))''' - - if DEMO_MODE: - self.confidence.value = cryptomining_detector_output["confidence"] - self.analyze_prediction_accuracy() - - connection_info = ConnectionInfo( - request.connection_metadata.ip_o, - request.connection_metadata.port_o, - request.connection_metadata.ip_d, - request.connection_metadata.port_d, - ) + col_values = [1, 2, 3] + + with open(csv_file_path, 'a', newline='') as file: + writer = csv.writer(file) + writer.writerow(col_values) + + logging.debug("Performing inference... {}".format(self.replica_uuid)) + + inference_time_start = time.time() + cryptomining_detector_output = self.perform_distributed_inference(self.active_requests) + inference_time_end = time.time() + + LOGGER.debug("Inference performed in {} seconds".format(inference_time_end - inference_time_start)) + logging.info("Inference performed correctly") - self.l3_non_empty_time_interval = True + self.inference_results.append({"output": cryptomining_detector_output, "timestamp": datetime.now()}) + LOGGER.debug("inference_results length: {}".format(len(self.inference_results))) - if cryptomining_detector_output["tag_name"] == "Crypto": - self.l3_security_status = 1 + for i, req in enumerate(self.active_requests): + service_id = req.connection_metadata.service_id + device_id = req.connection_metadata.endpoint_id.device_id + endpoint_id = req.connection_metadata.endpoint_id - self.l3_inferences_in_interval_counter_crypto += 1 - self.l3_ml_model_confidence_crypto = ( - self.l3_ml_model_confidence_crypto * (self.l3_inferences_in_interval_counter_crypto - 1) - + cryptomining_detector_output["confidence"] - ) / self.l3_inferences_in_interval_counter_crypto + # Check if a request of a new service has been received and, if so, create the monitored KPIs for that service + if service_id not in self.service_ids: + self.create_kpis(service_id, device_id, endpoint_id) + self.service_ids.append(service_id) - if connection_info not in self.l3_attacks: - self.l3_attacks.append(connection_info) - self.l3_unique_attack_conns += 1 + monitor_kpis_start = time.time() + self.monitor_kpis() + monitor_kpis_end = time.time() - self.l3_unique_compromised_clients = len(set([conn.ip_o for conn in self.l3_attacks])) - self.l3_unique_attackers = len(set([conn.ip_d for conn in self.l3_attacks])) + LOGGER.debug("Monitoring KPIs performed in {} seconds".format(monitor_kpis_end - monitor_kpis_start)) + LOGGER.debug("cryptomining_detector_output: {}".format(cryptomining_detector_output[i])) - else: - self.l3_inferences_in_interval_counter_normal += 1 - self.l3_ml_model_confidence_normal = ( - self.l3_ml_model_confidence_normal * (self.l3_inferences_in_interval_counter_normal - 1) - + cryptomining_detector_output["confidence"] - ) / self.l3_inferences_in_interval_counter_normal - - # Only notify Attack Mitigator when a cryptomining connection has been detected - if cryptomining_detector_output["tag_name"] == "Crypto" and connection_info not in self.attack_connections: - self.attack_connections.append(connection_info) - - # Calculate F1 score - self.y_pred.append(1) + if DEMO_MODE: + self.confidence.value = cryptomining_detector_output[i]["confidence"] + self.analyze_prediction_accuracy() - if connection_info.ip_o in ATTACK_IPS or connection_info.ip_d in ATTACK_IPS: - self.correct_attack_conns += 1 - self.correct_predictions += 1 - self.y_true.append(1) - else: - #LOGGER.debug("False positive: {}".format(connection_info)) - self.false_positives.value = self.false_positives.value + 1 - self.y_true.append(0) + connection_info = ConnectionInfo( + req.connection_metadata.ip_o, + req.connection_metadata.port_o, + req.connection_metadata.ip_d, + req.connection_metadata.port_d, + ) - self.total_predictions.value = self.total_predictions.value + 1 + self.l3_non_empty_time_interval = True - # if False: - notification_time_start = time.perf_counter() + if cryptomining_detector_output[i]["tag_name"] == "Crypto": + self.l3_security_status = 1 - LOGGER.debug("Crypto attack detected") + self.l3_inferences_in_interval_counter_crypto += 1 + self.l3_ml_model_confidence_crypto = ( + self.l3_ml_model_confidence_crypto * (self.l3_inferences_in_interval_counter_crypto - 1) + + cryptomining_detector_output[i]["confidence"] + ) / self.l3_inferences_in_interval_counter_crypto - # Notify the Attack Mitigator component about the attack - logging.info( - "Notifying the Attack Mitigator component about the attack in order to block the connection..." - ) + if connection_info not in self.l3_attacks: + self.l3_attacks.append(connection_info) + self.l3_unique_attack_conns += 1 - try: - logging.info("Sending the connection information to the Attack Mitigator component...") - message = L3AttackmitigatorOutput(**cryptomining_detector_output) - response = self.attackmitigator_client.PerformMitigation(message) - notification_time_end = time.perf_counter() - - self.am_notification_times.append(notification_time_end - notification_time_start) - - #LOGGER.debug(f"am_notification_times length: {len(self.am_notification_times)}") - #LOGGER.debug(f"last am_notification_time: {self.am_notification_times[-1]}") - - if len(self.am_notification_times) > 100: - am_notification_times_np_array = np.array(self.am_notification_times) - np.save("am_notification_times.npy", am_notification_times_np_array) - - avg_notification_time = np.mean(am_notification_times_np_array) - max_notification_time = np.max(am_notification_times_np_array) - min_notification_time = np.min(am_notification_times_np_array) - std_notification_time = np.std(am_notification_times_np_array) - median_notification_time = np.median(am_notification_times_np_array) - - '''LOGGER.debug("Average notification time: {}".format(avg_notification_time)) - LOGGER.debug("Max notification time: {}".format(max_notification_time)) - LOGGER.debug("Min notification time: {}".format(min_notification_time)) - LOGGER.debug("Std notification time: {}".format(std_notification_time)) - LOGGER.debug("Median notification time: {}".format(median_notification_time))''' - - with open("am_notification_times_stats.txt", "w") as f: - f.write("Average notification time: {}\n".format(avg_notification_time)) - f.write("Max notification time: {}\n".format(max_notification_time)) - f.write("Min notification time: {}\n".format(min_notification_time)) - f.write("Std notification time: {}\n".format(std_notification_time)) - f.write("Median notification time: {}\n".format(median_notification_time)) - - # logging.info("Attack Mitigator notified and received response: ", response.message) # FIX No message received - logging.info("Attack Mitigator notified\n") - - return Empty(message="OK, information received and mitigator notified abou the attack") - except Exception as e: - logging.error("Error notifying the Attack Mitigator component about the attack: ", e) - logging.error("Couldn't find l3_attackmitigator\n") - - return Empty(message="Attack Mitigator not found") - else: - logging.info("No attack detected") + self.l3_unique_compromised_clients = len(set([conn.ip_o for conn in self.l3_attacks])) + self.l3_unique_attackers = len(set([conn.ip_d for conn in self.l3_attacks])) - if cryptomining_detector_output["tag_name"] != "Crypto": - self.y_pred.append(0) - if connection_info.ip_o not in ATTACK_IPS and connection_info.ip_d not in ATTACK_IPS: - self.correct_predictions += 1 - self.y_true.append(0) else: - #LOGGER.debug("False negative: {}".format(connection_info)) - self.false_negatives.value = self.false_negatives.value + 1 - self.y_true.append(1) + self.l3_inferences_in_interval_counter_normal += 1 + self.l3_ml_model_confidence_normal = ( + self.l3_ml_model_confidence_normal * (self.l3_inferences_in_interval_counter_normal - 1) + + cryptomining_detector_output[i]["confidence"] + ) / self.l3_inferences_in_interval_counter_normal + + # Only notify Attack Mitigator when a cryptomining connection has been detected + if cryptomining_detector_output[i]["tag_name"] == "Crypto": + if DEMO_MODE: + self.attack_connections.append(connection_info) + + # Calculate F1 score + self.y_pred.append(1) + + if connection_info.ip_o in ATTACK_IPS or connection_info.ip_d in ATTACK_IPS: + self.correct_attack_conns += 1 + self.correct_predictions += 1 + self.y_true.append(1) + else: + LOGGER.debug("False positive: {}".format(connection_info)) + self.false_positives.value = self.false_positives.value + 1 + self.y_true.append(0) + + self.total_predictions.value = self.total_predictions.value + 1 + + # if False: + notification_time_start = time.perf_counter() + + LOGGER.debug("Crypto attack detected") + + # Notify the Attack Mitigator component about the attack + logging.info( + "Notifying the Attack Mitigator component about the attack in order to block the connection..." + ) + + try: + logging.info("Sending the connection information to the Attack Mitigator component...") + message = L3AttackmitigatorOutput(**cryptomining_detector_output[i]) + response = self.attackmitigator_client.PerformMitigation(message) + notification_time_end = time.perf_counter() + + self.am_notification_times.append(notification_time_end - notification_time_start) + + LOGGER.debug(f"am_notification_times length: {len(self.am_notification_times)}") + LOGGER.debug(f"last am_notification_time: {self.am_notification_times[-1]}") + + if len(self.am_notification_times) > 100: + am_notification_times_np_array = np.array(self.am_notification_times) + np.save("am_notification_times.npy", am_notification_times_np_array) + + avg_notification_time = np.mean(am_notification_times_np_array) + max_notification_time = np.max(am_notification_times_np_array) + min_notification_time = np.min(am_notification_times_np_array) + std_notification_time = np.std(am_notification_times_np_array) + median_notification_time = np.median(am_notification_times_np_array) + + LOGGER.debug("Average notification time: {}".format(avg_notification_time)) + LOGGER.debug("Max notification time: {}".format(max_notification_time)) + LOGGER.debug("Min notification time: {}".format(min_notification_time)) + LOGGER.debug("Std notification time: {}".format(std_notification_time)) + LOGGER.debug("Median notification time: {}".format(median_notification_time)) + + with open("am_notification_times_stats.txt", "w") as f: + f.write("Average notification time: {}\n".format(avg_notification_time)) + f.write("Max notification time: {}\n".format(max_notification_time)) + f.write("Min notification time: {}\n".format(min_notification_time)) + f.write("Std notification time: {}\n".format(std_notification_time)) + f.write("Median notification time: {}\n".format(median_notification_time)) + + # logging.info("Attack Mitigator notified and received response: ", response.message) # FIX No message received + logging.info("Attack Mitigator notified") + + #return Empty(message="OK, information received and mitigator notified abou the attack") + + except Exception as e: + logging.error("Error notifying the Attack Mitigator component about the attack: ", e) + logging.error("Couldn't find l3_attackmitigator") + + return Empty(message="Attack Mitigator not found") + else: + logging.info("No attack detected") - self.total_predictions.value = self.total_predictions.value + 1 + if cryptomining_detector_output[i]["tag_name"] != "Crypto": + self.y_pred.append(0) + if connection_info.ip_o not in ATTACK_IPS and connection_info.ip_d not in ATTACK_IPS: + self.correct_predictions += 1 + self.y_true.append(0) + else: + LOGGER.debug("False negative: {}".format(connection_info)) + self.false_negatives.value = self.false_negatives.value + 1 + self.y_true.append(1) - return Empty(message="Ok, information received (no attack detected)") + self.total_predictions.value = self.total_predictions.value + 1 + + # return Empty(message="Ok, information received (no attack detected)") + + self.active_requests = [] + return Empty(message="Ok, metrics processed") + + return Empty(message="Ok, information received") def analyze_prediction_accuracy(self): #LOGGER.info("Number of Attack Connections Correctly Classified: {}".format(self.correct_attack_conns))