^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ ftpd\[[0-9]+\]: connection from
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ ftpd\[[0-9]+\]: get .+(| = [0-9]+ bytes)
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ ftpd\[[0-9]+\]: User ftp timed out after [0-9]+ seconds
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ ftpd\[[0-9]+\]: User unknown timed out after [0-9]+ seconds$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ ftpd\[[0-9]+\]: mmap\(0\): Illegal seek$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ xinetd\[[0-9]+\]: START: ftp pid=[0-9]+ from=.+
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ xinetd\[[0-9]+\]: EXIT: ftp status=[0-9]+ pid=[0-9]+ duration=
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ xinetd\[[0-9]+\]: USERID: ftp (OTHER|UNIX) :(root| chllr)$
