1
imaplogin: Connection, ip=
2
imaplogin: LOGIN, user=
3
imaplogin: LOGOUT, user=
4
imaplogin: DISCONNECTED, user=
1
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: Connection, ip=\[[.:[:alnum:]]+\]$
2
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: LOGIN, user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], protocol=IMAP$
3
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: LOGOUT, user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+, time=[0-9]+$
4
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: LOGOUT, ip=\[[.:[:alnum:]]+\]$
5
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: DISCONNECTED, user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$
6
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imaplogin: DISCONNECTED, ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+$