+--------+----------+----------------------+----------+---------------------+-----+-------+---------------------------------+-------------------------+-------------------------+----------+----------+----------+---------------+--------------+---------------+------------------+-------------------+
| status | priority | class                | hostname | timestamp           | sid | cid   | signature                       | INET_NTOA(event.src_ip) | INET_NTOA(event.dst_ip) | ip_proto | src_port | dst_port | signature_gen | signature_id | signature_rev | unified_event_id | unified_event_ref |
+--------+----------+----------------------+----------+---------------------+-----+-------+---------------------------------+-------------------------+-------------------------+----------+----------+----------+---------------+--------------+---------------+------------------+-------------------+
|      0 |        3 | protocol-command-dec | metro    | 2008-02-08 07:57:39 |   6 | 75513 | ftp_pp: FTP malformed parameter | 88.254.129.178          | 212.252.202.183         |        6 |     1074 |       21 |           125 |            4 |             1 |              237 |               237 | 
+--------+----------+----------------------+----------+---------------------+-----+-------+---------------------------------+-------------------------+-------------------------+----------+----------+----------+---------------+--------------+---------------+------------------+-------------------+