",0,"AB5J2xnDCAAntbcZCABFAABMGV5AAIAGLlyTIFSlTih9BASdGgvw0QvAxUWHdVAY+rCL4gAAUFJJVk1TRyAjemFyYXNhNDggOiBzbXNzLmV4ZSAoMzY4KQ0K",1
suricata.alert,2011-08-12T16:52:57.716360,1031464864740687,83,,,147.32.84.165,1181,78.40.125.4,6667,"TCP","alert",,,0,1,2017318,4,"ET CURRENT_EVENTS SUSPICIOUS IRC - PRIVMSG *.(exe||tar||tgz||zip)  download command","Potentially Bad Traffic",2,,,,,27,35,2302,4520,2011-08-12T16:47:24.357711,,,,,,"UFJJVk1TRyAjemFyYXNhNDggOiBzbXNzLmV4ZSAoMzY4KQ0K","PRIVMSG #zarasa48 : smss.exe (368)
suricata.dns,2011-08-12T16:55:22.154618,2247896271051770,775,,,147.32.84.165,1141,147.32.80.9,53,"UDP","dns",,1,553,,"irc.freenode.net","A",,,,0
suricata.fileinfo,2011-08-12T18:59:22.181050,472067367468746,25767,,,74.207.254.18,80,147.32.84.165,1046,"TCP","fileinfo",,"/","HTML document, ASCII text",F,"CLOSED","70041821acf87389e40ddcb092004184","10395ab3566395ca050232d2c1a0dbad69eb5fd2","2e4c462b3424afcc04f43429d5f001e4ef9a28143bfeefb9af2254b4df3a7c1a",T,1,301,0,"www.nmap.org","/",,"Mozilla/4.0 (compatible)","text/html","GET",,"HTTP/1.1",301,"http://nmap.org/",301,"http"
suricata.flow,2011-08-14T09:38:53.914038,929669869939483,,,,147.32.84.165,138,147.32.84.255,138,"UDP","flow",,2,0,486,0,2011-08-12T16:53:47.928539,2011-08-12T16:53:47.928552,0,"new","timeout",F,"failed"
suricata.http,2011-08-12T17:00:36.378914,269421754201300,22569,,,147.32.84.165,1027,74.125.232.202,80,"TCP","http",,"cr-tools.clients.google.com","/service/check2?appid=%7B430FD4D0-B729-4F61-AA34-91526481799D%7D&appversion=1.3.21.65&applang=&machine=0&version=1.3.21.65&osversion=5.1&servicepack=Service%20Pack%202",,"Google Update/1.3.21.65;winhttp",,"GET",,"HTTP/1.1",,,0,0
suricata.netflow,2011-08-14T09:38:55.549713,929669869939483,,,,147.32.84.165,138,147.32.84.255,138,"UDP","netflow",,2,486,2011-08-12T16:53:47.928539,2011-08-12T16:53:47.928552,0,"failed"
suricata.stats,2019-05-02T17:56:53.843674
type,timestamp
type,timestamp,flow_id,pcap_cnt,vlan,in_iface,src_ip,src_port,dest_ip,dest_port,proto,event_type,community_id,alert.app_proto,alert.action,alert.gid,alert.signature_id,alert.rev,alert.signature,alert.category,alert.severity,alert.source.ip,alert.source.port,alert.target.ip,alert.target.port,flow.pkts_toserver,flow.pkts_toclient,flow.bytes_toserver,flow.bytes_toclient,flow.start,flow.end,flow.age,flow.state,flow.reason,flow.alerted,payload,payload_printable,stream,packet,packet_info.linktype
type,timestamp,flow_id,pcap_cnt,vlan,in_iface,src_ip,src_port,dest_ip,dest_port,proto,event_type,community_id,dns.type,dns.id,dns.flags,dns.rrname,dns.rrtype,dns.rcode,dns.rdata,dns.ttl,dns.tx_id
type,timestamp,flow_id,pcap_cnt,vlan,in_iface,src_ip,src_port,dest_ip,dest_port,proto,event_type,community_id,fileinfo.filename,fileinfo.magic,fileinfo.gaps,fileinfo.state,fileinfo.md5,fileinfo.sha1,fileinfo.sha256,fileinfo.stored,fileinfo.file_id,fileinfo.size,fileinfo.tx_id,http.hostname,http.url,http.http_port,http.http_user_agent,http.http_content_type,http.http_method,http.http_refer,http.protocol,http.status,http.redirect,http.length,app_proto
type,timestamp,flow_id,pcap_cnt,vlan,in_iface,src_ip,src_port,dest_ip,dest_port,proto,event_type,community_id,flow.pkts_toserver,flow.pkts_toclient,flow.bytes_toserver,flow.bytes_toclient,flow.start,flow.end,flow.age,flow.state,flow.reason,flow.alerted,app_proto
type,timestamp,flow_id,pcap_cnt,vlan,in_iface,src_ip,src_port,dest_ip,dest_port,proto,event_type,community_id,http.hostname,http.url,http.http_port,http.http_user_agent,http.http_content_type,http.http_method,http.http_refer,http.protocol,http.status,http.redirect,http.length,tx_id
type,timestamp,flow_id,pcap_cnt,vlan,in_iface,src_ip,src_port,dest_ip,dest_port,proto,event_type,community_id,netflow.pkts,netflow.bytes,netflow.start,netflow.end,netflow.age,app_proto
