#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path ssh #open 2020-07-06-18-41-46 #fields t id.orig_h id.orig_p id.resp_h id.resp_p status country #types time addr port addr port string string 1594060906.595605 1.2.3.4 1234 2.3.4.5 80 failure US 1594060906.595605 1.2.3.4 1234 2.3.4.5 80 failure UK 1594060906.595605 1.2.3.4 1234 2.3.4.5 80 failure BR #close 2020-07-06-18-41-46