support more syslog header fields
prival and version are seperate fields