#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path weird #open 2020-04-30-00-47-04 #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer #types time string addr port addr port string string bool string 1523627611.748118 CHhAvVGS1DHFjwGM9 127.0.0.1 58128 127.0.0.1 80 HTTP_range_not_matching_len - F zeek #close 2020-04-30-00-47-04