<134>Original Address=192.168.2.253 1 1656855207.091545910 NORDC_MX400_1 flows src=142.16.24.76 dst=227.70.138.85 protocol=udp sport=57388 dport=57775 pattern: 1 all
This is a syslog message from a product called Meraki by Cisco. The following fields were extracted from the message:
senderhost: 192.168.2.250
serverport: 57388
tags: ['deny', 'meraki', 'flow']
productids: [26, 0]
sourceinfo: unknown
action: block
sensitivity: normal
messagetype: flow
clientport: 57775
protocol: 17
streamName: meraki
clientIP: 227.70.138.85
serverIP: 142.16.24.76