escape some addt chars to keep snort happy