When you have dots in field names these gets expanded, which means that ip.checksum need to hold an object containing the status field as well as a string. As every field must have a distinct mapping, this is not allowed and causes an error. You therefore need to change the structure or rename your keys to get away from the dot notation.
See this thread for an example.