Syslog header parser