#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path conn #open 2020-07-06-19-15-23 #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents #types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string] 1400173552.423915 CHhAvVGS1DHFjwGM9 192.168.4.149 54775 192.168.4.149 110 tcp ssl,pop3 2.489002 851 2590 SF - - 0 ShAadDfFr 16 1695 17 3462 - #close 2020-07-06-19-15-23