#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path tunnel #open 2016-07-13-16-16-21 #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p tunnel_type action #types time string addr port addr port enum enum 1443732977.848660 - ::1 0 ::1 80 Tunnel::HTTP Tunnel::DISCOVER #close 2016-07-13-16-16-21