CRON.*CMD
CRON.*STARTUP
ahttp-gw.*exit
ahhtp-gw.*idle
aol-gw.*host=
/kernel.*arplookup.*failed
authsrv.*AUTHENTICATE
binkd-gw.*host=
binkd-gw.*host address lookup failed
binkp-gw.*host=
binkp-gw.*host address lookup failed
cmd-gw.*host=
cmd-gw.*command:
cmd-gw.*connection closed
cmd-gw.*tn_getc: Connection reset
#cron.*RELOAD
finger-gw.*connect host=
ftp-gw.*authenticate user=
ftp-gw.*exit host=
ftp-gw.*host=
ftp-gw.*permit host=
ftp-gw.*Transfer clean
ftp-gw.*Network timeout
ftpd.*ANONYMOUS FTP LOGIN
ftpd.*FTP LOGIN FROM
ftpd.*connect
ftpd.*retrieved
ftpd.*stored
fwtkcfgerr
fwtksyserr
ident-spoofer.*permit host
ident-spoofer.*requested information granted
ident-spoofer.*peer dropped connection
hqdaemon.*permit host
hqdaemon.*warning:
hqdaemon.*error:
ipmon.*NAT:MAP
ipmon.*NAT:EXPIRE
ntpdate.*version=
ntpdate.*step time server
newsyslog.*logfile turned over
ssmtp.*relay to
ssmtp.*intranet route removed
ssmtp.*log-headers:
ssmtp.*Domain name required
#ssmtp.*smtp server didn't accept RCPT To: command, replied \"550.*User unknown
gopher-gw.*Network timeout signal after 
gopher-gw.*No auth
gopher-gw.*connect
gopher-gw.*content-type
gopher-gw.*host=
gopher-gw.*on closed socket
gopher-gw.*Transfer clean
gui.*exit
gui.*host=
gui.*protocol=
gui.*DEBUG
gui.*sendfile
gui.*finished
gui.*Keepalive
gui.*Start
gui.*Hangup
host name lookup failed
http-gw.*Network timeout signal after 
http-gw.*No auth
http-gw.*connect
http-gw.*content-type
http-gw.*host=
http-gw.*on closed socket
http-gw.*Transfer clean
smth-gw.*host=
smth-gw.*Network timeout
squid-gw.*permit host=
squid-gw.*exit host=
squid-gw.*request:
squid-gw.*Content-Type:
squid-gw.*unknown request header field:
squid-gw.*premature end
squid-gw.*invalid response
squid-gw.*unknown response header field:
squid-gw.*dangerous response header field:
squid-gw.*attempt to write to closed connection
squid-gw.*missing colon
squid-gw.*unknown tag
squid-gw.*dangerous tag
squid-gw.*<meta> attributes:
squid-gw.*HTTP-EQUIV used instead of NAME for <META>
squid-gw.*Cannot receive from client: Operation timed out
squid-gw.*Cannot receive from client: Connection reset by peer
squid-gw.*Cannot send to server: Operation timed out
squid-gw.*error(): Operation timed out
squid-gw.*getpeername failed: Socket is not connected
squid-gw.*NAME used instead of HTTP-EQUIV
squid-gw.*unknown attribute for
squid-gw.*Treating as HTML:
squid-gw.*Empty response from server
squid-gw.*Trailing NUL character removed
squid-gw.*Content-Type unsupported: wwwserver/wsapi
ssl-gw.*host=
ssl-gw.*unknown header Content-Length: 0
icmpinfo.*ICMP_Dest_Unreachable\[Port\]
icmpinfo.*ICMP_Dest_Unreachable\[Host\]
icmpinfo.*ICMP_Dest_Unreachable\[Net\]
icmpinfo.*ICMP_RouterAdvert < 195.19.198.1 \[portal\] 
info-gw.*exit
info-gw.*host=
info-gw.*file=
irc-gw.*host=
irc-gw.*Network timeout
irc-gw.*dcc session connected
irc-gw.*dcc session exit
irc-gw.*size parameter missing
irc-gw.*malformed dcc request, cmd=REJECT
irc-gw.*host address lookup failed
last.message.repeated
login-ts.*authenticate user=
lp-gw.*host=
mail.local
mqueue:.*timeout
mqueue:.*User unknown
ms-sql-gw.*host=
named.*Lame delegation to
named.*Malformed response from
named.*answer queries
named.*ns_forw: query
named.*ns_forw: server name mismatch
named.*ns_resp:
named.*reloading
named.*starting
named.*sysquery: query
named.*sysquery: server name mismatch
named.*Cleaned cache of
named.*USAGE
named.*NSTATS
named.*XSTATS
named.*points to a CNAME
named.*bad referral
netacl.*host=
nntp-gw.*host=
nntp-gw.*bytes=
nntp-gw.*unterminated line
nntp-gw.*Operation timed out
nntp-gw.*Connection reset by peer
plug-gw.*host=
pingd.*host=
pop3-gw.*AUTHENTICATE
pop3-gw.*digest=
pop3-gw.*exit
pop3-gw.*host=
pop3-gw.*warning: APOP authentication failed
pop3-gw.*received timestamp from server
pop3-gw.*warning: server provided no timestamp
pop3-gw.*user failed to authenticate
pop3-gw.*cannot connect to server
radm.*exit
radm.*log
radm.*permit
ra-gw.*host=
rap.*RealAudio
rlogin-gw.*Network timeout signal
rlogin-gw.*authenticate user=
rlogin-gw.*connected host=
rlogin-gw.*connection timeout
rlogin-gw.*exit host=
rlogin-gw.*host=
rlogin-gw.*permit host=
rsh-gw.*host=
rsh-gw.*AUTHENTICATE
securityalert
securitywarning
sendmail.*alias database.*rebuilt
sendmail.*aliases.*longest
sendmail.*from=
sendmail.*message-id=
sendmail.*return to sender:
sendmail.*stat=
sendmail.*timeout waiting for input
#smap.*VRFY
#smap.*EXPN
smap.*host=
smtpd.*host=
smtpd.*relay=
smap.*peer dropped connection: No such file or directory
smapd.*daemon running
smapd.*delivered
smtpfwdd.*delivered
smtpfwdd.*forwarding
smapd.*Transfer clean
sshd.*log: Generating new
sshd.*debug:
sshd.*log: Connection from
sshd.*log: executing remote command
sshd.*log: RSA key generation complete
sshd.*fatal: Connection closed by remote host
sshd.*log: Closing connection to
sshd.*:log: RhostsRsa authentication not available
su.*to.*on
syb-gw.*host=
#syslogd: exiting
syslogd: restart
telnetd.*ttloop:  peer died
telnetd.*flow.=
tn-gw.*authenticate user=
tn-gw.*connected host=
tn-gw.*exit host=
tn-gw.*host=
tn-gw.*permit host=
tn-gw.*Network timeout signal
updatespamdb.*database update complete
whois.*connect host=
x-gw.*child exit host=
x-gw.*idle timed out duration=
x-gw.*permit host=.*x-connection
x-gw.*started
x-gw.*control.exit
x-gw.*read fd:.*Operation timed out
x-gw.*read fd:.*Connection reset by peer
mmp.*Can't find supported application
mmp.*Sleeping for 2 minutes
mmp.*Starting
RealAudio.*Can't find supported application
RealAudio.*Sleeping for 2 minutes
RealAudio.*Starting
NetShow.*Can't find supported application
NetShow.*Sleeping for 2 minutes
NetShow.*Starting
VDOLive.*Can't find supported application
VDOLive.*Sleeping for 2 minutes
VDOLive.*Starting
strmwrks-gw.*Network timeout signal
strmwrks-gw.*Received client reset
strmwrks-gw.*Sleep for 2 minutes
strmwrks-gw.*First packet is not a request packet
strmwrks-gw.*Out of sync packets detected
snmpd.*agent ready on port
snmpd.*received SNMP packet
trans.*DEBUG
pcxdpp.*Add
pcxdpp.*Remove
pcxdpp.*ready
pcxdpp.*Timed
pcxdpp.*caught
pcxdpp.*EXIT
authgui.*DELETED
authgui.*CHANGE
authgui.*UPDATED
ioctl.*I_GETSIG.*131