[syslog-ng] Syslog-ng filter for Snort or Barnyard2, if possible