cfc32e5950
correct zeek fields for `fields` section. improve false positives information
correct zeek fields for `fields` section. improve false positives information