#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	known_services
#open	2011-06-24-15-51-31
#fields	ts	host	port_num	port_proto	service
#types	time	addr	port	enum	table[string]
1308930691.049431	172.16.238.131	22	tcp	SSH
1308930694.550308	172.16.238.131	80	tcp	HTTP
1308930718.361665	172.16.238.131	21	tcp	FTP
#close	2011-06-24-15-52-08