#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path socks #open 2016-07-13-16-16-54 #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version user password status request.host request.name request_p bound.host bound.name bound_p #types time string addr port addr port count string string string addr string port addr string port 1368517392.724989 CHhAvVGS1DHFjwGM9 192.168.0.2 55951 192.168.0.1 1080 5 bob alice succeeded 192.168.0.2 - 22 192.168.0.1 - 55951 #close 2016-07-13-16-16-55