#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	rdp
#open	2019-05-28-14-29-20
#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	cookie	result	security_protocol	client_channels	keyboard_layout	client_build	client_name	client_dig_product_id	desktop_width	desktop_height	requested_color_depth	cert_type	cert_count	cert_permanent	encryption_level	encryption_method
#types	time	string	addr	port	addr	port	string	string	string	vector[string]	string	string	string	string	count	count	string	string	count	bool	string	string
1297551041.284715	CHhAvVGS1DHFjwGM9	192.168.1.200	49206	192.168.1.150	3389	AWAKECODI	encrypted	HYBRID	-	-	-	-	-	-	-	-	-	0	-	-	-
1297551078.958821	ClEkJM2Vm5giqnMf4h	192.168.1.200	49207	192.168.1.150	3389	AWAKECODI	encrypted	HYBRID	-	-	-	-	-	-	-	-	-	0	-	-	-
#close	2019-05-28-14-29-20