kazulog@sv1:~$ sudo journalctl --no-pager -o short-precise | awk '/STEP5-BEGIN-20260912-101552/{f=1} f' Sep 12 10:19:35.142173 sv1 KAZULOG[4130]: STEP5-BEGIN-20260912-101552 Sep 12 10:19:35.190652 sv1 sshd-session[4051]: syslogin_perform_logout: logout() returned an error Sep 12 10:19:35.191953 sv1 sshd-session[4097]: Received disconnect from 10.100.3.1 port 53614:11: disconnected by user Sep 12 10:19:35.192170 sv1 sshd-session[4097]: Disconnected from user kazulog 10.100.3.1 port 53614 Sep 12 10:19:35.193471 sv1 sshd-session[4051]: pam_unix(sshd:session): session closed for user kazulog Sep 12 10:19:35.196034 sv1 systemd[1]: session-25.scope: Deactivated successfully. Sep 12 10:19:35.199054 sv1 systemd-logind[1133]: Session 25 logged out. Waiting for processes to exit. Sep 12 10:19:35.202299 sv1 systemd-logind[1133]: Removed session 25. Sep 12 10:19:45.213316 sv1 systemd[1]: Stopping user@1000.service - User Manager for UID 1000... Sep 12 10:19:45.219950 sv1 systemd[3663]: Activating special unit exit.target... Sep 12 10:19:45.221210 sv1 systemd[3663]: Stopped target default.target - Main User Target. Sep 12 10:19:45.221346 sv1 systemd[3663]: Stopped target basic.target - Basic System. Sep 12 10:19:45.221435 sv1 systemd[3663]: Stopped target paths.target - Paths. Sep 12 10:19:45.222941 sv1 systemd[3663]: Stopped target sockets.target - Sockets. Sep 12 10:19:45.224167 sv1 systemd[3663]: Stopped target timers.target - Timers. Sep 12 10:19:45.224315 sv1 systemd[3663]: Stopped launchpadlib-cache-clean.timer - Clean up old files in the Launchpadlib cache. Sep 12 10:19:45.228160 sv1 systemd[3663]: Closed dbus.socket - D-Bus User Message Bus Socket. Sep 12 10:19:45.228345 sv1 systemd[3663]: Closed dirmngr.socket - GnuPG network certificate management daemon. Sep 12 10:19:45.228472 sv1 systemd[3663]: Closed gpg-agent-browser.socket - GnuPG cryptographic agent and passphrase cache (access for web browsers). Sep 12 10:19:45.228593 sv1 systemd[3663]: Closed gpg-agent-extra.socket - GnuPG cryptographic agent and passphrase cache (restricted). Sep 12 10:19:45.231363 sv1 systemd[3663]: Stopping gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation)... Sep 12 10:19:45.238124 sv1 systemd[3663]: Stopping gpg-agent.socket - GnuPG cryptographic agent and passphrase cache... Sep 12 10:19:45.238247 sv1 systemd[3663]: Closed keyboxd.socket - GnuPG public key management service. Sep 12 10:19:45.238390 sv1 systemd[3663]: Closed pk-debconf-helper.socket - debconf communication socket. Sep 12 10:19:45.238509 sv1 systemd[3663]: Closed snapd.session-agent.socket - REST API socket for snapd user session agent. Sep 12 10:19:45.247532 sv1 systemd[3663]: Stopping ssh-agent.socket - OpenSSH Agent socket... Sep 12 10:19:45.247632 sv1 systemd[3663]: Closed systemd-ask-password.socket - Query the User Interactively for a Password. Sep 12 10:19:45.320990 sv1 systemd[3663]: Closed gpg-agent.socket - GnuPG cryptographic agent and passphrase cache. Sep 12 10:19:45.329235 sv1 systemd[3663]: Closed ssh-agent.socket - OpenSSH Agent socket. Sep 12 10:19:45.330343 sv1 systemd[3663]: Closed gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation). Sep 12 10:19:45.333620 sv1 systemd[3663]: Removed slice app.slice - User Application Slice. Sep 12 10:19:45.334105 sv1 systemd[3663]: Reached target shutdown.target - Shutdown. Sep 12 10:19:45.334567 sv1 systemd[3663]: Finished systemd-exit.service - Exit the Session. Sep 12 10:19:45.335072 sv1 systemd[3663]: Reached target exit.target - Exit the Session. Sep 12 10:19:45.343237 sv1 systemd-logind[1133]: Removed session 21. Sep 12 10:19:45.348391 sv1 systemd[1]: user@1000.service: Deactivated successfully. Sep 12 10:19:45.350030 sv1 systemd[1]: Stopped user@1000.service - User Manager for UID 1000. Sep 12 10:19:45.358068 sv1 systemd[1]: Stopping user-runtime-dir@1000.service - User Runtime Directory /run/user/1000... Sep 12 10:19:45.385450 sv1 systemd[1]: run-user-1000.mount: Deactivated successfully. Sep 12 10:19:45.387536 sv1 systemd[1]: user-runtime-dir@1000.service: Deactivated successfully. Sep 12 10:19:45.388219 sv1 systemd[1]: Stopped user-runtime-dir@1000.service - User Runtime Directory /run/user/1000. Sep 12 10:19:45.393318 sv1 systemd[1]: Removed slice user-1000.slice - User Slice of UID 1000. Sep 12 10:19:45.393492 sv1 systemd[1]: user-1000.slice: Consumed 2.324s CPU time over 13.819s wall clock time, 46.8M memory peak. Sep 12 10:20:15.967406 sv1 systemd[1]: Starting sysstat-collect.service - system activity accounting tool... Sep 12 10:20:16.028500 sv1 systemd[1]: sysstat-collect.service: Deactivated successfully. Sep 12 10:20:16.029408 sv1 systemd[1]: Finished sysstat-collect.service - system activity accounting tool. Sep 12 10:20:27.907030 sv1 chronyd[1195]: Selected source 185.125.190.123 (2.ntp.ubuntu.com) Sep 12 10:20:36.777122 sv1 sshd-session[4170]: Accepted publickey for kazulog from 10.100.3.1 port 53633 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 10:20:36.785292 sv1 sshd-session[4170]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 10:20:36.807393 sv1 systemd[1]: Created slice user-1000.slice - User Slice of UID 1000. Sep 12 10:20:36.811091 sv1 systemd[1]: Starting user-runtime-dir@1000.service - User Runtime Directory /run/user/1000... Sep 12 10:20:36.819909 sv1 systemd-logind[1133]: New session '26' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 10:20:36.844195 sv1 systemd[1]: Finished user-runtime-dir@1000.service - User Runtime Directory /run/user/1000. Sep 12 10:20:36.849900 sv1 systemd[1]: Starting user@1000.service - User Manager for UID 1000... Sep 12 10:20:36.864023 sv1 (systemd)[4175]: pam_unix(systemd-user:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 10:20:36.866530 sv1 systemd-logind[1133]: New session '27' of user 'kazulog' with class 'manager' and type 'unspecified'. Sep 12 10:20:36.996235 sv1 systemd[4175]: Queued start job for default target default.target. Sep 12 10:20:36.998615 sv1 systemd[4175]: Created slice app.slice - User Application Slice. Sep 12 10:20:36.999121 sv1 systemd[4175]: Started launchpadlib-cache-clean.timer - Clean up old files in the Launchpadlib cache. Sep 12 10:20:36.999157 sv1 systemd[4175]: Reached target paths.target - Paths. Sep 12 10:20:36.999220 sv1 systemd[4175]: Reached target timers.target - Timers. Sep 12 10:20:37.001323 sv1 systemd[4175]: Starting dbus.socket - D-Bus User Message Bus Socket... Sep 12 10:20:37.001634 sv1 systemd[4175]: Listening on dirmngr.socket - GnuPG network certificate management daemon. Sep 12 10:20:37.002948 sv1 systemd[4175]: Listening on gpg-agent-browser.socket - GnuPG cryptographic agent and passphrase cache (access for web browsers). Sep 12 10:20:37.003046 sv1 systemd[4175]: Listening on gpg-agent-extra.socket - GnuPG cryptographic agent and passphrase cache (restricted). Sep 12 10:20:37.004394 sv1 systemd[4175]: Starting gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation)... Sep 12 10:20:37.007101 sv1 systemd[4175]: Starting gpg-agent.socket - GnuPG cryptographic agent and passphrase cache... Sep 12 10:20:37.007386 sv1 systemd[4175]: Listening on keyboxd.socket - GnuPG public key management service. Sep 12 10:20:37.008015 sv1 systemd[4175]: Listening on pk-debconf-helper.socket - debconf communication socket. Sep 12 10:20:37.008289 sv1 systemd[4175]: Listening on snapd.session-agent.socket - REST API socket for snapd user session agent. Sep 12 10:20:37.011153 sv1 systemd[4175]: Starting ssh-agent.socket - OpenSSH Agent socket... Sep 12 10:20:37.014896 sv1 systemd[4175]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. Sep 12 10:20:37.077429 sv1 systemd[4175]: Listening on dbus.socket - D-Bus User Message Bus Socket. Sep 12 10:20:37.094207 sv1 systemd[4175]: Listening on gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation). Sep 12 10:20:37.094638 sv1 systemd[4175]: Listening on gpg-agent.socket - GnuPG cryptographic agent and passphrase cache. Sep 12 10:20:37.095243 sv1 systemd[4175]: Listening on ssh-agent.socket - OpenSSH Agent socket. Sep 12 10:20:37.095919 sv1 systemd[4175]: Reached target sockets.target - Sockets. Sep 12 10:20:37.096224 sv1 systemd[4175]: Reached target basic.target - Basic System. Sep 12 10:20:37.096637 sv1 systemd[4175]: Reached target default.target - Main User Target. Sep 12 10:20:37.097173 sv1 systemd[1]: Started user@1000.service - User Manager for UID 1000. Sep 12 10:20:37.097350 sv1 systemd[4175]: Startup finished in 220ms. Sep 12 10:20:37.101552 sv1 systemd[1]: Started session-26.scope - Session 26 of User kazulog. Sep 12 10:20:37.821164 sv1 sudo[4248]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 10:20:37.822003 sv1 sudo[4248]: kazulog : PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/python3 - Sep 12 10:20:37.862114 sv1 sudo[4248]: pam_unix(sudo:session): session closed for user root Sep 12 10:20:37.864686 sv1 sshd-session[4247]: Received disconnect from 10.100.3.1 port 53633:11: disconnected by user Sep 12 10:20:37.865042 sv1 sshd-session[4247]: Disconnected from user kazulog 10.100.3.1 port 53633 Sep 12 10:20:37.866459 sv1 sshd-session[4170]: pam_unix(sshd:session): session closed for user kazulog Sep 12 10:20:37.869515 sv1 systemd[1]: session-26.scope: Deactivated successfully. Sep 12 10:20:37.873600 sv1 systemd-logind[1133]: Session 26 logged out. Waiting for processes to exit. Sep 12 10:20:37.877117 sv1 systemd-logind[1133]: Removed session 26. Sep 12 10:20:38.020070 sv1 sshd-session[4252]: Accepted publickey for kazulog from 10.100.3.1 port 53634 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 10:20:38.024946 sv1 sshd-session[4252]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 10:20:38.032289 sv1 systemd-logind[1133]: New session '28' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 10:20:38.036158 sv1 systemd[1]: Started session-28.scope - Session 28 of User kazulog. Sep 12 10:20:38.343007 sv1 sudo[4342]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 10:20:38.343529 sv1 sudo[4342]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/ls -l /home/ftpdemo/ Sep 12 10:20:38.351468 sv1 sudo[4342]: pam_unix(sudo:session): session closed for user root Sep 12 10:20:38.443939 sv1 sudo[4365]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 10:20:38.444442 sv1 sudo[4365]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/systemctl restart vsftpd Sep 12 10:20:38.460683 sv1 systemd[1]: Stopping vsftpd.service - vsftpd FTP server... Sep 12 10:20:38.464479 sv1 systemd[1]: vsftpd.service: Deactivated successfully. Sep 12 10:20:38.465175 sv1 systemd[1]: Stopped vsftpd.service - vsftpd FTP server. Sep 12 10:20:38.470148 sv1 systemd[1]: Starting vsftpd.service - vsftpd FTP server... Sep 12 10:20:38.485087 sv1 systemd[1]: Started vsftpd.service - vsftpd FTP server. Sep 12 10:20:38.487640 sv1 sudo[4365]: pam_unix(sudo:session): session closed for user root Sep 12 10:20:38.534557 sv1 sshd-session[4252]: syslogin_perform_logout: logout() returned an error Sep 12 10:20:38.535922 sv1 sshd-session[4298]: Received disconnect from 10.100.3.1 port 53634:11: disconnected by user Sep 12 10:20:38.536494 sv1 sshd-session[4298]: Disconnected from user kazulog 10.100.3.1 port 53634 Sep 12 10:20:38.537580 sv1 sshd-session[4252]: pam_unix(sshd:session): session closed for user kazulog Sep 12 10:20:38.539981 sv1 systemd[1]: session-28.scope: Deactivated successfully. Sep 12 10:20:38.542510 sv1 systemd-logind[1133]: Session 28 logged out. Waiting for processes to exit. Sep 12 10:20:38.546394 sv1 systemd-logind[1133]: Removed session 28. Sep 12 10:20:38.669095 sv1 sshd-session[4385]: Accepted publickey for kazulog from 10.100.3.1 port 53635 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 10:20:38.675130 sv1 sshd-session[4385]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 10:20:38.684115 sv1 systemd-logind[1133]: New session '29' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 10:20:38.688333 sv1 systemd[1]: Started session-29.scope - Session 29 of User kazulog. Sep 12 10:20:38.940385 sv1 sudo[4464]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 10:20:38.940947 sv1 sudo[4464]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/journalctl --no-pager -o short-precise