Call strprefix instead of strncmp in event parsing