#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path netcontrol_drop #open 2020-07-06-18-50-16 #fields ts rule_id orig_h orig_p resp_h resp_p expire location #types time string addr port addr port interval string 1594061413.899119 3 1.1.2.2 - - - 15.000000 Hi there #close 2020-07-06-18-50-16