#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	conn
#open	2014-04-01-23-15-49
#fields	proto	ts	id.orig_h
#types	enum	string	addr
tcp	2012-02-21T08:52:55-0800	141.142.220.235
tcp	2012-02-21T08:52:59-0800	141.142.220.235
tcp	2012-02-21T08:53:14-0800	199.233.217.249
tcp	2012-02-21T08:53:17-0800	199.233.217.249
tcp	2012-02-21T08:52:41-0800	141.142.220.235
#close	2014-04-01-23-15-49
#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	conntimelast
#open	2014-04-01-23-15-49
#fields	proto	ts	id.orig_h
#types	enum	string	addr
tcp	2012-02-21T08:52:55-0800	141.142.220.235
tcp	2012-02-21T08:52:59-0800	141.142.220.235
tcp	2012-02-21T08:53:14-0800	199.233.217.249
tcp	2012-02-21T08:53:17-0800	199.233.217.249
tcp	2012-02-21T08:52:41-0800	141.142.220.235
#close	2014-04-01-23-15-49
