#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	conn
#open	2014-04-01-23-15-49
#fields	proto	ts	id.orig_h
#types	enum	string	addr
tcp	2012-02-21T08:52:55-0800	141.142.220.235
tcp	2012-02-21T08:52:59-0800	141.142.220.235
tcp	2012-02-21T08:53:14-0800	199.233.217.249
tcp	2012-02-21T08:53:17-0800	199.233.217.249
tcp	2012-02-21T08:52:41-0800	141.142.220.235
#close	2014-04-01-23-15-49
#separator ,
#set_separator,,
#empty_field,(empty)
#unset_field,-
#path,conn
#open,2014-06-30-16-10-54
#fields,proto,ts,id.orig_h
#types,enum,string,addr
tcp,2012-02-21T08:52:55-0800,141.142.220.235
tcp,2012-02-21T08:52:59-0800,141.142.220.235
tcp,2012-02-21T08:53:14-0800,199.233.217.249
tcp,2012-02-21T08:52:41-0800,141.142.220.235
tcp,2012-02-21T08:53:17-0800,199.233.217.249
#close,2014-06-30-16-10-55
