^id=\w+ sn=\w+ time="\.+" fw=\S+ SonicWall_Decoder sonicwall pri=(\S+) status sonicwall msg="(\.+)" action sonicwall src=(\d+.\d+.\d+.\d+):(\d+):\S* dst=(\d+.\d+.\d+.\d+):(\d+):\S* scrip, scrport ,dstip, dstport, protocol sonicwall proto=(\S+) protocol