#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path tunnel #open 2016-07-13-16-16-54 #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p tunnel_type action #types time string addr port addr port enum enum 1368517392.728523 - 192.168.0.2 0 192.168.0.1 1080 Tunnel::SOCKS Tunnel::DISCOVER #close 2016-07-13-16-16-55