Parsing Issue - ciscorouter

Hello,

I am having some parsing issues and need help.

Our system receiving the following logs: 

seems like a standard logs according to my understanding.

Using the most updated live parser 'ciscorouter'.

After parsing, those are the meta keys we are seeing:

Any ideas why do we getting all those "word" meta-keys and why both IP addressees under the same key (ip.addr)?

Thanks!