ossec/ossec-hids — pull request #323 by ddpbsd (2014-09-29 20:00:10+00:00)
Title: derp, forgot that the domains end in a .

The domains in the logs end in a ".", so the decoder was picking up "ossec.net." and this caused some issues.