^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: \[IPTABLES DROP\] : IN=eth[0-9] OUT= MAC=.*
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: \[IPTABLES DROP\] : IN=.*DPT=22
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: \[[.0-9].*\] \[IPTABLES DROP\] : IN=eth0 OUT= MAC=.*