#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path netcontrol_drop #open 2016-02-17-20-21-38 #fields ts rule_id orig_h orig_p resp_h resp_p expire location #types time string addr port addr port interval string 1455740498.301865 3 1.1.2.2 - - - 15.000000 Hi there #close 2016-02-17-20-21-38