The common event format (CEF) was created by a company called ArcSight,
who were acquired by HP. According to docs on HP's website (search for a
file called "CommonEventFormatV24.pdf") the protocol property is defined
as:[ul]CEF key name: protofull n...
