I need to correlate entries in dnscache logs with ipf.log. The former uses some kind of hexadecimal atomic time like: @400000003e9d8179261ab8fc So how can I convert this to something more useful? Thanks John.