#separator \x09
#set_separator  ,
#empty_field    (empty)
#unset_field    -
#path   weird
#open   2015-11-14-21-13-03
#fields ts  uid id.orig_h   id.orig_p   id.resp_h   id.resp_p   name    addl    notice  peer
#types  time    string  addr    port    addr    port    string  string  bool    string
1447535583.360660   CINKwc4qfM6FwfLg8f  192.168.1.226   49375   10.3.57.126 3389    window_recision -   F   worker-4
1447535592.328571   CyWcNeRtZiTsCtf42   192.168.1.226   54169   10.3.57.126 443 SYN_inside_connection   -   F   worker-4
1447535592.060687   CS33e43PhhsIULJjk2  192.168.1.226   54167   10.3.57.126 443 SYN_inside_connection   -   F   worker-2