Having just downloaded version 0.6 of the TA, I suspect that the two of the FIELDALIASes need adjustment:
The first (FIELDALIAS-icmptype = icmpcode AS icmp_type) looks like it should be:
FIELDALIAS-icmptype = icmptype AS icmp_type
The second (FIELDALIAS-bytes = size) looks like it should be:
FIELDALIAS-bytes = size AS bytes
I'm hoping that the author is monitoring Answers and is able to fix the two issues.
