The text f5f96047e602, as Debian 4.0 (Etch) shipped it.
convert Snort logs to firewall DLF
snort2dlf(1) on Linux now