{
  "cmdline": "ssh host",
  "dest_connection_ip": "8.8.8.8",
  "dest_connection_port": "22",
  "file_path": "/usr/bin/ssh",
  "h": {
    "directory": "/usr/bin",
    "md5": "f1d4751c48d72b1b9fa684f07cc00d90",
    "sha1": "f20dcabe1f13d36a03aa98132b0f78e3e607b747",
    "sha256": "99b3f0bd1e0a9b0337b359b2f1467ec4fbcca972451fb1fac4ab922dcc3e4a4a"
  },
  "name": "ssh",
  "pos": {
    "family": "2",
    "protocol": "6"
  },
  "query_time": "1501790282",
  "src_connection_ip": "8.8.8.8",
  "src_connection_port": "1111"
}