The text 1a9992c2247d, as Debian 3.1 (Sarge) shipped it.
convert Snort logs to firewall DLF
snort2dlf(1) on Linux now