#Oct 12 00:39:03 patricia dhcpd: LOGIN IP 172.20.24.135 MAC 00:03:ff:54:1e:6f
#Oct 12 00:51:21 patricia dhcpd: LOGOUT IP 172.20.24.144 MAC 00:0e:35:8d:f8:6f
#Oct 12 00:58:20 patricia ciistpmo: DHCP Session started by '172.20.24.122' on '00:0d:88:52:30:0b'
#Oct 12 00:51:21 patricia ciistpmo: DHCP Session ended by '172.20.24.144' on '00:0e:35:8d:f8:6f'
#Jan 12 23:23:47 patricia acquire_lease: IPTables new entry: ip=172.20.24.184 mac=00:12:f0:72:6b:7e mark=1
#Jan 12 23:29:22 patricia release_lease: IPTables removed entry: ip=172.20.24.184 mac=00:12:f0:72:6b:7e mark=1
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): LOGIN IP [.0-9]+ MAC [:[:alnum:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2.2.x|): LOGOUT IP [.0-9]+ MAC [:[:alnum:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ciistpmo: DHCP Session (started|ended) by '[.0-9]+' on '[:[:alnum:]]+'$
^\w{3} [ 0-9][0-9] [:0-9]{8} [._[:alnum:]-]+ acquire_lease: IPTables new entry: ip=[.0-9]+ mac=[:[:alnum:]]+ mark=1$
^\w{3} [ 0-9][0-9] [:0-9]{8} [._[:alnum:]-]+ release_lease: IPTables removed entry: ip=[.0-9]+ mac=[:[:alnum:]]+ mark=1$
