Make tcpdump, wall and useradd match formatting.

While writing a parser I found that some files does not conform to the formatting rules. Changed the ones I found.
Sounds good, about updating your pull request.

Out of curiosity what's the parser you're building? If you make it public we can add it to the main `README` if you want.