Get protocol field from regex

my log as follow: system-ip: 123.33.33.1 state:up protocol: ipsec destination-ip: 192.160.23.1

I want to use regex to get ipsec (protocol field) , may i know the expression for this, thanks

@jolinchew

Do you want to succeed in it via terminal looking through a file or using js in a browser?