#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	weird
#open	2017-01-25-16-07-10
#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	name	addl	notice	peer
#types	time	string	addr	port	addr	port	string	string	bool	string
1485331604.832238	CSdHx91xFbEKdyo3Pi	172.16.185.11	40721	8.8.8.8	53	bad_UDP_checksum	-	F	bro
1485331604.840044	CSdHx91xFbEKdyo3Pi	172.16.185.11	40721	8.8.8.8	53	dns_unmatched_reply	-	F	bro
1485331609.712570	Cw4TXS1DvS49mvRtN4	172.16.185.11	58915	8.8.8.8	53	dns_unmatched_reply	-	F	bro
1485331619.101223	CSdHx91xFbEKdyo3Pi	172.16.185.11	40721	8.8.8.8	53	dns_unmatched_msg	-	F	bro
1485331619.115208	CGwJfm35oSWSuMdVS6	172.16.185.11	50308	8.8.8.8	53	dns_unmatched_reply	-	F	bro
1485331619.115208	Cw4TXS1DvS49mvRtN4	172.16.185.11	58915	8.8.8.8	53	dns_unmatched_msg	-	F	bro
1485331619.115208	CGwJfm35oSWSuMdVS6	172.16.185.11	50308	8.8.8.8	53	dns_unmatched_msg	-	F	bro
#close	2017-01-25-16-07-10