#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path known_services #open 2019-06-15-23-44-01 #fields ts host port_num port_proto service #types time addr port enum set[string] 1308930716.462556 74.125.225.81 80 tcp HTTP 1308930726.889624 141.142.192.39 22 tcp SSH 1308930727.236071 69.50.219.51 123 udp NTP #close 2019-06-15-23-44-01