Regular Expressions 101

Pro

Group 1(TCP|FIN|RST|TIMEOUT)

1st AlternativeTCP

TCPthe literal text TCP (case sensitive)

2nd AlternativeFIN

FINthe literal text FIN (case sensitive)

3rd AlternativeRST

RSTthe literal text RST (case sensitive)

4th AlternativeTIMEOUT

TIMEOUTthe literal text TIMEOUT (case sensitive)

\sany whitespace character

Group srcip(?<srcip>\d+\.\d+\.\d+\.\d+)

\d+a digit, repeated at least once

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

\d+a digit, repeated at least once

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

\d+a digit, repeated at least once

\.the literal . (46₁₀ / 56₈ / 2E₁₆)

\d+a digit, repeated at least once

\/the literal / (47₁₀ / 57₈ / 2F₁₆)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

Detailed match information will be displayed here automatically.

25 tokens

(TCP|FIN|RST|TIMEOUT)\s(?<srcip>\d+\.\d+\.\d+\.\d+)\/

Nov 5 17:37:57 abcxyz.com fwlogs:[27999] match PASS 5864897/5893553 IN 60 TCP 10.10.10.10/4655->10.20.20.20/443 S

Nov 5 17:37:57 abcxyz.com fwlogs:[27999] match PASS 5864897/5893553 IN 60 TCP 10.10.10.10/4655->10.20.20.20/443 S