Greetings Daniel: Thank you for this help, and your regular and timely help for ossec
I'm not able to change the formatting at present; we use Bastille for Linux, and I'm not sure (at present) what hacking I can get away with in that area. What would I change in the decode to support multiple spaces? thank you.
