| # | Field | Type | Display name | Description |
|---|---|---|---|---|
| 1 | time | DATE | Time | |
| 2 | app_id | INT | App ID | |
| 3 | app_name | STRING | App name | |
| 4 | user_id | STRING | User ID | |
| 5 | sid | STRING | SID | |
| 6 | bytes_recvd | LONG | Bytes recvd | |
| 7 | bytes_sent | LONG | Bytes sent | |
| 8 | interface_luid | LONG | Interface luid | |
| 9 | l2_profile_id | STRING | L2 profile ID | |
| 10 | l2_profile_flags | STRING | L2 profile flags |