ossec/ossec-hids — pull request #322 by ddpbsd (2014-09-29 19:49:53+00:00)
Title: extra_data doesn't seem to be a supported field for cdb lists.

So switch that to url. It almost fits the intended use (at least as
well as extra_data does).