dhcpd.*: DHCPINFORM from [\.[:digit:]]+( via eth.)?
dhcpd.*: DHCPNACK on [\.[:digit:]]+ to [:[:alnum:]]+( via eth.)?
dhcpd.*: DHCPRELEASE of .* from .* via
dhcpd.*: Reclaiming( REQUESTed) abandoned IP address [\.[:digit:]]+
dhcpd.*: already acking lease
dhcpd.*: send_packet: Connection refused
dhcpd.*: fallback_discard: Connection refused
Fax(Getty|Send)\[.*\]: STATE CHANGE:( ->| BASE| LOCKWAIT| LISTENING| RUNNING| ANSWERING| RECEIVING| MODEMWAIT)+
Fax(Getty|Send)\[.*\]: MODEM (ROCKWELL|ZYXEL) .*
FaxGetty\[.*\]: RECV FAX \([[:digit:]]+\): from .*, page .* in [[:digit:]]+:[[:digit:]]+, INF, .* line/mm, (1|2)-D MR(, [[:digit:]]+ bit/s)?
FaxGetty\[.*\]: RECV FAX \([[:digit:]]+\): recvq/fax[[:digit:]]+\.tif from .*, route to .*, [[:digit:]]+ pages in [[:digit:]]+:[[:digit:]]+
FaxGetty\[.*\]: RECV FAX: bin/faxrcvd "recvq/fax[[:digit:]]+\.tif" "ttyS[012]" "[[:digit:]]+" ""
FaxGetty\[.*\]: ANSWER: Ring detected without successful handshake
FaxGetty\[.*\]: ANSWER: FAX CONNECTION
FaxQueuer\[.*\]: SUBMIT JOB [[:digit:]]+
FaxSend\[.*\]: SEND FAX: JOB [[:digit:]]+ DEST [[:digit:]]+ COMMID [[:digit:]]+
gnu-imap4d\[.*\]: Incoming connection opened
gnu-imap4d\[.*\]: connect from [\.[:digit:]]+
gnu-imap4d\[.*\]: User '[[:alnum:]]+' logged in
gnu-imap4d\[.*\]: Session timed out for user: [[:alnum:]]+
gnu-imap4d\[.*\]: got signal Alarm clock
HylaFAX\[.*\]: Filesystem has SysV-style file creation semantics.
ircd\[.*\]: ircd exiting: autodie
ircd\[.*\]: Server Ready
(ircd\[.*\]: )?binding stream socket [\.[:alnum:]]+\[\*\.666[789]\]: Address already in use
IMP\[.*\]: Login .* to .*:143 as .*
kernel: isdn_net: call from [,[:digit:]]+ -> [[:digit:]]+
kernel: isdn_net: Service-Indicator not [[:digit:]], ignored
kernel: Packet log: input DENY eth[[:digit:]]+ PROTO=17 .*:(137|138) .*:(137|138) L=[[:digit:]]+ S=0x00 I=[[:digit:]]+ F=0x0000 T=[[:digit:]]+ \(#[[:digit:]]+\)
named\[.*\]: .*: query\(.*\) NS points to CNAME \(.*\)
named\[.*\]: NSTATS [[:digit:]]+ [[:digit:]]+
named\[.*\]: .* All possible .* lame
ntpd\[.*\]: kern_enable is 1
ntpd\[.*\]: kernel time discipline status 0040
ntpd\[.*\]: ntpd 4\.[01]\..* \([12]\)
ntpd\[.*\]: precision = [[:digit:]]+ usec
ntpd\[.*\]: signal_no_reset: signal 13 had flags [[:digit:]]+
ntpd\[.*\]: using kernel phase-lock loop [[:digit:]]+
pam_limits\[.*\]: default limits skipped for 'root'
pop-before-smtp\[.*\]: (opening|closing) relay for [\.[:digit:]]+( --- not in mynetworks)?
su\[.*\]: \+ pts/[[:digit:]]+ .*-root