#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path smb_files #open 2018-02-23-14-06-36 #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fuid action path name size prev_name times.modified times.accessed times.created times.changed #types time string addr port addr port string enum string string count string time time time time 1132371118.616918 CyJmiE3Q1jwSEU234e 192.168.114.1 52704 192.168.114.129 445 - SMB::FILE_OPEN - \\torture_qfileinfo.txt 0 - 1132371118.176250 1132371118.176250 1132371118.176250 1132371118.176250 #close 2018-02-23-14-06-36