use pair instead of just remote ip to detect entries
extract common, rename fields
time stamp added
fix formatting
split function
initial ipv6 support