^start of string
.+any character (except for line terminators), repeated at least once
>the literal > (6210 / 768 / 3E16)
\sany whitespace character
Group Date(?P<Date>\d{4}-\d{2}-\d{2}) \d{4}a digit, repeated exactly 4 times
-the literal - (4510 / 558 / 2D16)
\d{2}a digit, repeated exactly 2 times
-the literal - (4510 / 558 / 2D16)
\d{2}a digit, repeated exactly 2 times
Tthe literal T (8410 / 1248 / 5416) (case sensitive)
Group Time(?P<Time>\d{2}:\d{2}:\d{2}) \d{2}a digit, repeated exactly 2 times
:the literal : (5810 / 728 / 3A16)
\d{2}a digit, repeated exactly 2 times
:the literal : (5810 / 728 / 3A16)
\d{2}a digit, repeated exactly 2 times
.+any character (except for line terminators), repeated at least once
firewall,infothe literal text firewall,info (case sensitive) \sany whitespace character
Group RadUser(?P<RadUser>\d+) \d+a digit, repeated at least once
.+any character (except for line terminators), repeated at least once
in:the literal text in: (case sensitive) Group InputInterface(?P<InputInterface>[^,]+) Negated Character Class[^,]+ +matches at least one character outside the set below:
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
out:the literal text out: (case sensitive) Group OutputInterface(?P<OutputInterface>[^,]+) Negated Character Class[^,]+ +matches at least one character outside the set below:
,the literal , (4410 / 548 / 2C16)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
Non-Capturing Group(?:src-mac\s+(?P<SourceMacAddress>[^,]+),\s+)? ?repeats the group contents below at most once:
src-macthe literal text src-mac (case sensitive) \s+any whitespace character, repeated at least once
Group SourceMacAddress(?P<SourceMacAddress>[^,]+) Negated Character Class[^,]+ +matches at least one character outside the set below:
,the literal , (4410 / 548 / 2C16)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
protothe literal text proto (case sensitive) \s+any whitespace character, repeated at least once
Group Protocol(?P<Protocol>\w+) \w+any word character, repeated at least once
Non-Capturing Group(?:\s+\((?P<Flags>[^)]+)\))? ?repeats the group contents below at most once:
\s+any whitespace character, repeated at least once
\(the literal ( (4010 / 508 / 2816)
Group Flags(?P<Flags>[^)]+) Negated Character Class[^)]+ +matches at least one character outside the set below:
)the literal ) (4110 / 518 / 2916)
\)the literal ) (4110 / 518 / 2916)
,the literal , (4410 / 548 / 2C16)
\s+any whitespace character, repeated at least once
\[?optionally matches the literal [ (9110 / 1338 / 5B16)
Group SrcIP(?P<SrcIP>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}|[a-f\d:]+) 1st Alternative\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3} \d{1,3}a digit, repeated between 1 and 3 times
\.the literal . (4610 / 568 / 2E16)
\d{1,3}a digit, repeated between 1 and 3 times
\.the literal . (4610 / 568 / 2E16)
\d{1,3}a digit, repeated between 1 and 3 times
\.the literal . (4610 / 568 / 2E16)
\d{1,3}a digit, repeated between 1 and 3 times
+matches at least one character from the set below:
a-fone character from a (9710) to f (10210) (case sensitive)
\da digit
:the literal : (5810 / 728 / 3A16)
\]?optionally matches the literal ] (9310 / 1358 / 5D16)
Non-Capturing Group(?::(?P<SrcPort>\d+))? ?repeats the group contents below at most once:
:the literal : (5810 / 728 / 3A16)
Group SrcPort(?P<SrcPort>\d+) \d+a digit, repeated at least once
\[?optionally matches the literal [ (9110 / 1338 / 5B16)
Group DstIP(?P<DstIP>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}|[a-f\d:]+) 1st Alternative\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3} \d{1,3}a digit, repeated between 1 and 3 times
\.the literal . (4610 / 568 / 2E16)
\d{1,3}a digit, repeated between 1 and 3 times
\.the literal . (4610 / 568 / 2E16)
\d{1,3}a digit, repeated between 1 and 3 times
\.the literal . (4610 / 568 / 2E16)
\d{1,3}a digit, repeated between 1 and 3 times
+matches at least one character from the set below:
a-fone character from a (9710) to f (10210) (case sensitive)
\da digit
:the literal : (5810 / 728 / 3A16)
\]?optionally matches the literal ] (9310 / 1358 / 5D16)
Non-Capturing Group(?::(?P<DstPort>\d+))? ,the literal , (4410 / 548 / 2C16)
\sany whitespace character
\sany whitespace character
\(the literal ( (4010 / 508 / 2816)
Group SrcIpLocalNat(?P<SrcIpLocalNat>\b(?:\d{1,3}\.){3}\d{1,3}\b) :the literal : (5810 / 728 / 3A16)
Group SrcPortLocalNat(?P<SrcPortLocalNat>\d+) Group SrcIpPublicNat(?P<SrcIpPublicNat>\b(?:\d{1,3}\.){3}\d{1,3}\b) :the literal : (5810 / 728 / 3A16)
Group SrcPortPublicNat(?P<SrcPortPublicNat>\d+) \)the literal ) (4110 / 518 / 2916)
Group DestIpNat(?P<DestIpNat>\b(?:\d{1,3}\.){3}\d{1,3}\b) :the literal : (5810 / 728 / 3A16)
Group DestPortNat(?P<DestPortNat>\d+) ,the literal , (4410 / 548 / 2C16)
.+any character (except for line terminators), repeated at least once