#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path files #open 2024-12-04-13-09-40 #fields ts fuid uid id.orig_h id.orig_p id.resp_h id.resp_p source depth analyzers mime_type filename duration local_orig is_orig seen_bytes total_bytes missing_bytes overflow_bytes timedout parent_fuid md5 sha1 sha256 extracted extracted_cutoff extracted_size #types time string string addr port addr port string count set[string] string string interval bool bool count count count count bool string string string string string bool count 1733317780.245271 FXAHE3oHHaWQZGfZd CnqGfw3IyJRgUzQAV4 139.162.57.49 51330 139.162.57.116 80 HTTP 0 SHA1,MD5 text/html - 0.000019 F F 1577 1577 0 0 F - 02607da13bd89cbb585123facc975c76 a0e6dcace8f5ba0ca5a33cb98c8d79f27b3827b1 - - - - 1733318406.159929 FHRV4B1G8jJku428w4 CeMukL1ayu5UOg6pa7 162.19.239.42 60674 139.162.57.49 80 HTTP 0 SHA1,MD5 text/plain - 0.000000 F T 20 20 0 0 F - b4887208b27411732c37c3900230753d 443d895c0f7dad6dc1b6549470c06930b7e2a044 - - - - 1733318522.527713 F1a9Ov4ax7r5NcRdti C3cQic4NbkneCa0e9j 139.162.57.49 42904 185.122.204.197 80 HTTP 0 SHA1,MD5 text/x-shellscript - 0.000141 F F 2640 37368 0 0 F - f71efed3ac3cb9879d537e9c56f85710 6a7c388f2590963c4e152d9c3e07a4fe41d73a3b - - - - 1733318537.775207 F7g7g63VYaoOlzWau6 CymTKt3WccyOICMdo5 139.162.57.49 52568 78.153.140.60 80 HTTP 0 SHA1,MD5 application/x-executable - 0.000000 F F 1088 5967872 0 0 F - a298d560487e7b2d0ee94cb6b3d5e90b 6e7864452437c6778ca15d41a59d110f4f7412fc - - - - 1733318581.695322 FcceDYvknQwsak96 Czo4cg4Fjt5xjBPSfg 139.162.57.49 42148 185.122.204.197 80 HTTP 0 SHA1,MD5 text/x-shellscript - 0.000139 F F 2640 37368 0 0 F - f71efed3ac3cb9879d537e9c56f85710 6a7c388f2590963c4e152d9c3e07a4fe41d73a3b - - - - 1733318589.528198 F9qjcc4QeofoMXwuT1 CNgYdO3jGiiYWh8H16 139.162.57.49 47502 78.153.140.60 80 HTTP 0 SHA1,MD5 application/x-executable - 0.000001 F F 5132 5967872 0 0 F - 9cb15f784bfa2e4394222b21b359e162 701101f58ef58a88b26d4b292ce33e3d53353752 - - - -