pC_nforwardedcefasanapvpnstart.md

Parser Content

{
Name = n-forwarded-cef-asa-nap-vpn-start
    Vendor = Cisco
    Product = Adaptive Security Appliance
    Lms = NitroCefSyslog
    DataType = "vpn-start"
    TimeFormat = "epoch"
    Conditions = [ "Assigned private IP address", "|278-713228|" ]
    Fields = [
      """\srt=({time}\d{1,100})""",
      """\sshost=({host}[^\s]{1,2000})""",
      """\ssuser=({user}[^\r\n]{1,2000})\s{1,100}""",
      """\ssrc=({src_ip}\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})""",
      """\sdst=({src_translated_ip}\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})"""
    ]
  

}