^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ proftpd\[[[:digit:]]+\]: connect from [.:[:xdigit:]]+ \([.:[:xdigit:]]+\)$