Hi czardas,

They are HTML-URL and come all nicely lined up here from the SANS reading room, http://www.sans.org/reading-room/whitepapers/logging/detecting-attacks-web-applications-log-files-2074?show=detecting-attacks-web-applications-log-files-2074&cat=logging Author Roger Meyer
Just look up the perl compatibility,

pol