query_time = 1501790282
          pos.family = 2
               h.md5 = f1d4751c48d72b1b9fa684f07cc00d90
              h.sha1 = f20dcabe1f13d36a03aa98132b0f78e3e607b747
            h.sha256 = 99b3f0bd1e0a9b0337b359b2f1467ec4fbcca972451fb1fac4ab922dcc3e4a4a
         h.directory = /usr/bin
   src_connection_ip = 8.8.8.8
 src_connection_port = 1111
dest_connection_port = 22
  dest_connection_ip = 8.8.8.8
                name = ssh
           file_path = /usr/bin/ssh
             cmdline = ssh host
        pos.protocol = 6