#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	smb_mapping
#open	2020-04-30-00-47-29
#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	path	service	native_file_system	share_type
#types	time	string	addr	port	addr	port	string	string	string	string
1323202695.377084	CHhAvVGS1DHFjwGM9	10.0.0.11	49208	10.0.0.12	445	\\\\10.0.0.12\\smb2	-	-	DISK
1323202695.378188	CHhAvVGS1DHFjwGM9	10.0.0.11	49208	10.0.0.12	445	\\\\10.0.0.12\\IPC$	-	-	PIPE
#close	2020-04-30-00-47-29