#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	files
#open	2016-03-07-20-31-34
#fields	ts	fuid	tx_hosts	rx_hosts	conn_uids	source	depth	analyzers	mime_type	filename	duration	local_orig	is_orig	seen_bytes	total_bytes	missing_bytes	overflow_bytes	timedout	parent_fuid	md5	sha1	sha256	extracted
#types	time	string	set[addr]	set[addr]	set[string]	string	count	set[string]	string	string	interval	bool	bool	count	count	count	count	bool	string	string	string	string	string
1323202695.515890	FUU9mc3Ub5uZdcqg1d	10.0.0.11	10.0.0.12	CXWv6p3arKYeMETxOg	SMB	0	(empty)	application/pdf	WP_SMBPlugin.pdf	0.073970	-	T	1508939	-	0	0	T	-	-	-	-	-
#close	2016-03-07-20-31-34