zeek/testing/btest/Baseline/scripts.base.frameworks.logging.field-name-map2/conn.log

10 lines
598 B
Text

#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path conn
#open 2018-09-11-00-03-40
#fields ts uid src_ip src_port dst_ip dst_port proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents
#types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string]
1427304960.695733 CHhAvVGS1DHFjwGM9 192.168.1.2 49159 192.168.1.1 20000 tcp - 0.463113 120 0 S0 - - 0 SAD 5 332 0 0 -
#close 2018-09-11-00-03-40