- 'ipfire' => '(ipfire)',
- 'red' => '(red.*|kernel: usb.*|pppd\[.*\]|chat\[.*\]|pppoe\[.*\]|pptp\[.*\]|pppoa\[.*\]|pppoa3\[.*\]|pppoeci\[.*\]|ipppd|ipppd\[.*\]|kernel: ippp\d|kernel: isdn.*|ibod\[.*\]|kernel: eth.*|dhcpcd\[.*\]|modem_run\[.*\])',
- 'dns' => '(dnsmasq\[.*\])',
- 'dhcp' => '(dhcpd)',
- 'cron' => '(fcron\[.*\])',
- 'ntp' => '(ntpd(?:ate)?\[.*\])',
- 'ssh' => '(sshd(?:\(.*\))?\[.*\])',
- 'auth' => '(\w+\(pam_unix\)\[.*\])',
- 'kernel' => '(kernel)',
- 'ipsec' => '(ipsec_[\w_]+|pluto\[.*\]|vpnwatch)',
- 'snort' => '(snort)',
- 'openvpn' => '(openvpnserver)\[.*\]'
+ 'ipfire' => '(ipfire: )',
+ 'red' => '(red:|pppd\[.*\]: |chat\[.*\]|pppoe\[.*\]|pptp\[.*\]|pppoa\[.*\]|pppoa3\[.*\]|pppoeci\[.*\]|ipppd|ipppd\[.*\]|kernel: ippp\d|kernel: isdn.*|ibod\[.*\]|dhcpcd\[.*\]|modem_run\[.*\])',
+ 'dns' => '(dnsmasq\[.*\]: )',
+ 'dhcp' => '(dhcpd: )',
+ 'cron' => '(fcron\[.*\]: )',
+ 'ntp' => '(ntpd(?:ate)?\[.*\]: )',
+ 'ssh' => '(sshd(?:\(.*\))?\[.*\]: )',
+ 'auth' => '(\w+\(pam_unix\)\[.*\]: )',
+ 'kernel' => '(kernel: (?!DROP-))',
+ 'ipsec' => '(ipsec_[\w_]+: |pluto\[.*\]: |vpnwatch: )',
+ 'openvpn' => '(openvpnserver)\[.*\]: '