ENH: added multiline filter for sshd filter

(from John Thoe on mailing list)