^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: ntpd [-\.\@[:alnum:]]+ .* Starting
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: Command line: /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u [[:digit:]]+:[[:digit:]]+
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: Listen and drop on [[:digit:]] v[46]wildcard .*
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: Listen normally on [[:digit:]]+ [[:alnum:]]+ (\[)?([0-9.]{7,15}|[0-9a-fA-F:.]{4,39})([%[:digit:]+]+\])?:[[:digit:]]+
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: Listen normally on [[:digit:]]+ [[:alnum:]]+ \[::1\]:[[:digit:]]+
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: Listening on routing socket on fd #[[:digit:]]+ for interface updates
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: ([0-9.]{7,15}|[0-9a-fA-F:.]{4,39}) local addr ([0-9.]{7,15}|[0-9a-fA-F:.]{4,39}) .*
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: Soliciting pool server ([0-9.]{7,15}|[0-9a-fA-F:.]{4,39})
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: proto: precision = [0-9]+\.[0-9]+ usec \([+-][[:digit:]]+\)
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: receive: Unexpected origin timestamp from ([0-9.]{7,15}|[0-9a-fA-F:.]{4,39})
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: ntpd exiting on signal 15 \(Terminated\)