- GetValueToken() should return the remaining string to be able to parse
  tokens that occur multiple time correctly
- GetValueToken() should not stop if a value was not found, instead a
  pseudo token value like "NOTFOUND" should be returned

- if QuotedLogLine becomes too long it should be splitted up and each part
  should be send, it is not a good idea to just truncate the string

- the following erros occur:

Jan 18 19:08:31 Spiral BufferDaemon[23909]: mice_mod_pop_mysql: Error: mysql_query(INSERT INTO rawlog_line (hostname, domain, ip, osystem, release, version, date, time, logline, signature) VALUES ('AdditionalData', '' ^H^A', '',' ^Hf at^Q','','','alyzerid','Classification','','not supported')) | MySQL_Error: You have an error in your SQL syntax.  Check the manual that corresponds to your MySQL server version for the right syntax to use near 'f at^Q','','','alyzerid','Classification','','not supported')' a  
Jan 18 19:08:31 Spiral BufferDaemon[23909]: mice_mod_pop_mysql: Error: mysql_query(INSERT INTO rawlog_line (hostname, domain, ip, osystem, release, version, date, time, logline, signature) VALUES ('d Extensible Markup Language (XML) Document Type    ***  *** Definition," D. Curry and H. Debar.                         ***  *******************************************************************  *************************************************************** -->  <!-- ===============================================================  ===================================================================  === SECTION 1. Attribute list declarations.  ===================================================================  =============================================================== -->  <!--  | Attributes of the IDMEF element.  In general, the fixed values of  | these attributes will change each time a new version of the DTD  | is released.  --> <!ENTITY % attlist.idmef                "     version             CDATA        
Jan 18 19:08:31 Spiral BufferDaemon[23909]: mice_mod_pop_mysql: IMPORTANT WARNING! The Log Line may include SQL Commands, that can be an Attack! All dangerous Commands have been quoted to allow Secure Logging in the MySQL Database. 
Jan 18 19:08:31 Spiral BufferDaemon[23909]: mice_mod_pop_mysql: Error: mysql_query(INSERT INTO rawlog_line (hostname, domain, ip, osystem, release, version, date, time, logline, signature) VALUES ('  =============================================================== -->  <!--  | Values for the Action.category attribute.  --> <!ENTITY % attvals.actioncat            "     ( block-installed | notification-sent | taken-offline | other )   ">  <!--  | Values for the Address.category attribute.  --> <!ENTITY % attvals.addrcat              "     ( unknown | atm | e-mail | lotus-notes | mac | sna | vm |       ipv4-addr | ipv4-addr-hex | ipv4-net | ipv4-net-mask |       ipv6-addr | ipv6-addr-hex | ipv6-net | ipv6-net-mask )   ">  <!--  | Values for the AdditionalData.type attribute.  --> <!ENTITY % attvals.adtype               "     ( boolean | byte | character | date-time | integer | ntpstamp |       portlist | real | string | xml )   ">  <!--  | Values for the Impact.completion attribute.  --> <!ENTITY % attvals.complet
Jan 18 19:08:31 Spiral BufferDaemon[23909]: mice_mod_pop_mysql: IMPORTANT WARNING! The Log Line may include SQL Commands, that can be an Attack! All dangerous Commands have been quoted to allow Secure Logging in the MySQL Database. 
Jan 18 19:08:31 Spiral BufferDaemon[23909]: mice_mod_pop_mysql: Error: mysql_query(INSERT INTO rawlog_line (hostname, domain, ip, osystem, release, version, date, time, logline, signature) VALUES ('s | dns | hosts | kerberos |       nds | nis | nisplus | nt | wfw )   ">  <!--  | Values for the Classification.origin attribute.  --> <!ENTITY % attvals.origin               "     ( unknown | bugtraqid | cve | vendor-specific )   ">  <!--  | Values for the Confidence.rating attribute.  --> <!ENTITY % attvals.rating               "     ( low | medium | high | numeric )   ">  <!--  | Values for the Impact.severity attribute.  --> <!ENTITY % attvals.severity             "     ( low | medium | high )   ">  <!--  | Values for the User.category attribute.  --> <!ENTITY % attvals.usercat              "     ( unknown | application | os-device )   ">  <!--  | Values for yes/no attributes such as Source.spoofed and  | Target.decoy.  --> <!ENTITY % attvals.yesno                "     ( unknown | yes | no )   ">  <!-- =========
Jan 18 19:08:31 Spiral BufferDaemon[23909]: mice_mod_pop_mysql: IMPORTANT WARNING! The Log Line may include SQL Commands, that can be an Attack! All dangerous Commands have been quoted to allow Secure Logging in the MySQL Database. 
Jan 18 19:08:31 Spiral BufferDaemon[23909]: mice_mod_pop_mysql: Error: mysql_query(INSERT INTO rawlog_line (hostname, domain, ip, osystem, release, version, date, time, logline, signature) VALUES ('NT Heartbeat                     (     Analyzer, CreateTime, AnalyzerTime?, AdditionalData*   )> <!ATTLIST Heartbeat     ident               CDATA                   '0'     %attlist.global;   >  <!-- ===============================================================  ===================================================================  === SECTION 4. Subclasses of the Alert element that provide more  ===            data for specific types of alerts.  ===================================================================  =============================================================== -->  <!ELEMENT CorrelationAlert              (     name, alertident+   )> <!ATTLIST CorrelationAlert     %attlist.global;   >  <!ELEMENT OverflowAlert                 (     program, size?, buffer?   )> <!ATTLIST OverflowAlert     %attlist.glob
Jan 18 19:12:08 Spiral BufferDaemon[24471]: BufferDaemon: Opened Module 'mice_mod_pop_mysql'  
Jan 18 19:12:10 Spiral BufferDaemon[24474]: mice_mod_pop_mysql: IMPORTANT WARNING! The Log Line may include SQL Commands, that can be an Attack! All dangerous Commands have been quoted to allow Secure Logging in the MySQL Database. 
Jan 18 19:12:10 Spiral BufferDaemon[24474]: mice_mod_pop_mysql: Error: mysql_query(INSERT INTO rawlog_line (hostname, domain, ip, osystem, release, version, date, time, logline, signature) VALUES ('^A', '', 'completion','','min','	^Higin^Q','%a^Q','wn' ^Q','/@ELEM^Q','not supported')) | MySQL_Error: You have an error in your SQL syntax.  Check the manual that corresponds to your MySQL server version for the right syntax to use near '','not supported')' at line 2  
Jan 18 19:12:10 Spiral BufferDaemon[24474]: mice_mod_pop_mysql: IMPORTANT WARNING! The Log Line may include SQL Commands, that can be an Attack! All dangerous Commands have been quoted to allow Secure Logging in the MySQL Database. 
Jan 18 19:12:10 Spiral BufferDaemon[24474]: mice_mod_pop_mysql: Error: mysql_query(INSERT INTO rawlog_line (hostname, domain, ip, osystem, release, version, date, time, logline, signature) VALUES ('==================================================== -->  <!--  | Attributes of the IDMEF element.  In general, the fixed values of  | these attributes will change each time a new version of the DTD  | is released.  --> <!ENTITY % attlist.idmef                "     version             CDATA                   #FIXED    '1.0'   ">  <!--  | Attributes of all elements.  These are the "XML" attributes that  | every element should have.  Space handling, language, and name  | space.  --> <!ENTITY % attlist.global               "     xmlns:idmef         CDATA                   #FIXED         'urn:iana:xml:ns:idmef'     xmlns               CDATA                   #FIXED         'urn:iana:xml:ns:idmef'     xml:space           (default | preserve)    'default'     xml:lang            NMTOKEN                 #IMPLIED   ">  <!--
Jan 18 19:12:10 Spiral BufferDaemon[24474]: mice_mod_pop_mysql: IMPORTANT WARNING! The Log Line may include SQL Commands, that can be an Attack! All dangerous Commands have been quoted to allow Secure Logging in the MySQL Database. 
Jan 18 19:12:10 Spiral BufferDaemon[24474]: mice_mod_pop_mysql: Error: mysql_query(INSERT INTO rawlog_line (hostname, domain, ip, osystem, release, version, date, time, logline, signature) VALUES ('  <!--  | Values for the AdditionalData.type attribute.  --> <!ENTITY % attvals.adtype               "     ( boolean | byte | character | date-time | integer | ntpstamp |       portlist | real | string | xml )   ">  <!--  | Values for the Impact.completion attribute.  --> <!ENTITY % attvals.completion           "     ( failed | succeeded )   ">  <!--  | Values for the File.category attribute.  --> <!ENTITY % attvals.filecat              "     ( current | original )   ">  <!--  | Values for the Id.type attribute.  --> <!ENTITY % attvals.idtype               "     ( current-user | original-user | target-user | user-privs |       current-group | group-privs | other-privs )   ">  <!--  | Values for the Impact.type attribute.  --> <!ENTITY % attvals.impacttype           "     ( admin | dos | file | recon | user | other )
Jan 18 19:12:10 Spiral BufferDaemon[24474]: mice_mod_pop_mysql: IMPORTANT WARNING! The Log Line may include SQL Commands, that can be an Attack! All dangerous Commands have been quoted to allow Secure Logging in the MySQL Database. 
Jan 18 19:12:10 Spiral BufferDaemon[24474]: mice_mod_pop_mysql: Error: mysql_query(INSERT INTO rawlog_line (hostname, domain, ip, osystem, release, version, date, time, logline, signature) VALUES ('the User.category attribute.  --> <!ENTITY % attvals.usercat              "     ( unknown | application | os-device )   ">  <!--  | Values for yes/no attributes such as Source.spoofed and  | Target.decoy.  --> <!ENTITY % attvals.yesno                "     ( unknown | yes | no )   ">  <!-- ===============================================================  ===================================================================  === SECTION 3. Top-level element declarations.  The IDMEF-Message  ===            element and the types of messages it can include.  ===================================================================  =============================================================== -->  <!ELEMENT IDMEF-Message                 (     (Alert | Heartbeat)*   )> <!ATTLIST IDMEF-Message     %attlist.global;     %attlist.id
Jan 18 19:12:10 Spiral BufferDaemon[24474]: mice_mod_pop_mysql: IMPORTANT WARNING! The Log Line may include SQL Commands, that can be an Attack! All dangerous Commands have been quoted to allow Secure Logging in the MySQL Database. 
Jan 18 19:12:10 Spiral BufferDaemon[24474]: mice_mod_pop_mysql: Error: mysql_query(INSERT INTO rawlog_line (hostname, domain, ip, osystem, release, version, date, time, logline, signature) VALUES ('======================================================= -->  <!ELEMENT CorrelationAlert              (     name, alertident+   )> <!ATTLIST CorrelationAlert     %attlist.global;   >  <!ELEMENT OverflowAlert                 (     program, size?, buffer?   )> <!ATTLIST OverflowAlert     %attlist.global;   >  <!ELEMENT ToolAlert                     (     name, command?, alertident+   )> <!ATTLIST ToolAlert     %attlist.global;   >  <!-- ===============================================================  ===================================================================  === SECTION 5.  The AdditionalData element.  This element allows an  ===             alert to include additional information that cannot  ===             be encoded elsewhere in the data model.  ============================================================
