The text f4d9373529b3, as Debian 8 (Jessie) shipped it.
get record's type
auparse_get_type(3) on Linux now