Filtering socklog output revisited

At our site, we have a need to alter all socklock output.  This alteration
involves changing some of the information on each line that socklog
handles.

I found the following thread from around 1-1/2 years ago:

  http://thread.gmane.org/gmane.comp.misc.pape.general/920/focus=920

In it, it's stated that using a pipe in log/run is not advised, and
I'm wondering what other options I have, given that this filtering has
to occur for the data going into all of the "current" files.

It seems to me that my only option involves using an alternative to
the "socklog" executable.  Is that correct?  If so, can anyone suggest
such an alternative?  Is there perhaps something that has already been
written that will serve this purpose?

Thanks in advance.

-- 
 Lloyd Zusman
 [email protected]
 God bless you.