RP/0/RP0/CPU0:R1#show logging start Sep 10 13:14:19 end Sep 10 13:20:38 Thu Sep 10 13:48:32.118 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 233 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 10 13:14:19.574 UTC: logger[67415]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN RP/0/RP0/CPU0:Sep 10 13:14:19.817 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5928]: Received disconnect from 10.100.3.1 port 60309:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:14:19.817 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5928]: Disconnected from user cisco 10.100.3.1 port 60309 RP/0/RP0/CPU0:Sep 10 13:17:58.438 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6264]: Accepted authentication/pam for cisco from 10.100.3.1 port 60443 ssh2 RP/0/RP0/CPU0:Sep 10 13:18:00.902 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6269]: Received disconnect from 10.100.3.1 port 60443:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:18:00.902 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6269]: Disconnected from user cisco 10.100.3.1 port 60443 RP/0/RP0/CPU0:Sep 10 13:18:04.499 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6341]: Accepted authentication/pam for cisco from 10.100.3.1 port 60448 ssh2 RP/0/RP0/CPU0:Sep 10 13:18:06.808 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6346]: Received disconnect from 10.100.3.1 port 60448:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:18:06.808 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6346]: Disconnected from user cisco 10.100.3.1 port 60448 RP/0/RP0/CPU0:Sep 10 13:18:11.815 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6399]: Accepted authentication/pam for cisco from 10.100.3.1 port 60450 ssh2 RP/0/RP0/CPU0:Sep 10 13:18:13.843 UTC: bgp[1084]: %ROUTING-BGP-5-ADJCHANGE : neighbor 10.1.2.2 Down - User clear requested (CEASE notification sent - administrative reset) (VRF: default) (AS: 4259971073) RP/0/RP0/CPU0:Sep 10 13:18:13.845 UTC: bgp[1084]: %ROUTING-BGP-5-NSR_STATE_CHANGE : Changed state to NSR-Ready RP/0/RP0/CPU0:Sep 10 13:18:14.135 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6404]: Received disconnect from 10.100.3.1 port 60450:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:18:14.135 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6404]: Disconnected from user cisco 10.100.3.1 port 60450 RP/0/RP0/CPU0:Sep 10 13:18:25.904 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6460]: Accepted authentication/pam for cisco from 10.100.3.1 port 60456 ssh2 RP/0/RP0/CPU0:Sep 10 13:18:28.425 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6465]: Received disconnect from 10.100.3.1 port 60456:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:18:28.425 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6465]: Disconnected from user cisco 10.100.3.1 port 60456 RP/0/RP0/CPU0:Sep 10 13:18:44.133 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6554]: Accepted authentication/pam for cisco from 10.100.3.1 port 60462 ssh2 RP/0/RP0/CPU0:Sep 10 13:18:46.805 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6560]: Received disconnect from 10.100.3.1 port 60462:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:18:46.806 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6560]: Disconnected from user cisco 10.100.3.1 port 60462 RP/0/RP0/CPU0:Sep 10 13:18:48.392 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6625]: Accepted authentication/pam for cisco from 10.100.3.1 port 60464 ssh2 RP/0/RP0/CPU0:Sep 10 13:18:50.793 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6631]: Received disconnect from 10.100.3.1 port 60464:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:18:50.794 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6631]: Disconnected from user cisco 10.100.3.1 port 60464 RP/0/RP0/CPU0:Sep 10 13:19:00.288 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6686]: Accepted authentication/pam for cisco from 10.100.3.1 port 60473 ssh2 RP/0/RP0/CPU0:Sep 10 13:19:02.693 UTC: bgp[1084]: %ROUTING-BGP-5-ADJCHANGE : neighbor 10.1.2.2 Up (VRF: default) (AS: 4259971073) RP/0/RP0/CPU0:Sep 10 13:19:02.694 UTC: bgp[1084]: %ROUTING-BGP-5-NSR_STATE_CHANGE : Changed state to Not NSR-Ready RP/0/RP0/CPU0:Sep 10 13:19:03.306 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6691]: Received disconnect from 10.100.3.1 port 60473:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:19:03.306 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6691]: Disconnected from user cisco 10.100.3.1 port 60473 RP/0/RP0/CPU0:Sep 10 13:19:03.540 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6727]: Accepted authentication/pam for cisco from 10.100.3.1 port 60474 ssh2 RP/0/RP0/CPU0:Sep 10 13:19:05.912 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6747]: Received disconnect from 10.100.3.1 port 60474:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:19:05.912 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6747]: Disconnected from user cisco 10.100.3.1 port 60474 RP/0/RP0/CPU0:Sep 10 13:19:21.540 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6807]: Accepted authentication/pam for cisco from 10.100.3.1 port 60482 ssh2 RP/0/RP0/CPU0:Sep 10 13:19:21.777 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-3-ERR_GENERAL : sshd[4590]: Incoming SSH session rate limit exceeded RP/0/RP0/CPU0:Sep 10 13:19:23.839 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6812]: Received disconnect from 10.100.3.1 port 60482:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:19:23.839 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6812]: Disconnected from user cisco 10.100.3.1 port 60482 RP/0/RP0/CPU0:Sep 10 13:19:25.497 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6866]: Accepted authentication/pam for cisco from 10.100.3.1 port 60485 ssh2 RP/0/RP0/CPU0:Sep 10 13:19:27.721 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6871]: Received disconnect from 10.100.3.1 port 60485:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:19:27.721 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6871]: Disconnected from user cisco 10.100.3.1 port 60485 RP/0/RP0/CPU0:Sep 10 13:19:36.136 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6925]: Accepted authentication/pam for cisco from 10.100.3.1 port 60488 ssh2 RP/0/RP0/CPU0:Sep 10 13:19:38.216 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6930]: Received disconnect from 10.100.3.1 port 60488:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:19:38.216 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6930]: Disconnected from user cisco 10.100.3.1 port 60488 RP/0/RP0/CPU0:Sep 10 13:19:39.425 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6985]: Accepted authentication/pam for cisco from 10.100.3.1 port 60490 ssh2 RP/0/RP0/CPU0:Sep 10 13:19:42.042 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6991]: Received disconnect from 10.100.3.1 port 60490:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:19:42.042 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6991]: Disconnected from user cisco 10.100.3.1 port 60490 RP/0/RP0/CPU0:Sep 10 13:19:57.725 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7088]: Accepted authentication/pam for cisco from 10.100.3.1 port 60500 ssh2 RP/0/RP0/CPU0:Sep 10 13:20:00.334 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7093]: Received disconnect from 10.100.3.1 port 60500:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:20:00.334 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7093]: Disconnected from user cisco 10.100.3.1 port 60500 RP/0/RP0/CPU0:Sep 10 13:20:15.843 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7173]: Accepted authentication/pam for cisco from 10.100.3.1 port 60513 ssh2 RP/0/RP0/CPU0:Sep 10 13:20:18.210 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7178]: Received disconnect from 10.100.3.1 port 60513:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:20:18.210 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7178]: Disconnected from user cisco 10.100.3.1 port 60513 RP/0/RP0/CPU0:Sep 10 13:20:18.842 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7228]: Accepted authentication/pam for cisco from 10.100.3.1 port 60514 ssh2 RP/0/RP0/CPU0:Sep 10 13:20:21.730 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7233]: Received disconnect from 10.100.3.1 port 60514:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:20:21.730 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7233]: Disconnected from user cisco 10.100.3.1 port 60514 RP/0/RP0/CPU0:Sep 10 13:20:21.930 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7279]: Accepted authentication/pam for cisco from 10.100.3.1 port 60515 ssh2 RP/0/RP0/CPU0:Sep 10 13:20:29.512 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7294]: Received disconnect from 10.100.3.1 port 60515:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:20:29.512 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7294]: Disconnected from user cisco 10.100.3.1 port 60515 RP/0/RP0/CPU0:Sep 10 13:20:30.231 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7420]: Accepted authentication/pam for cisco from 10.100.3.1 port 60521 ssh2 RP/0/RP0/CPU0:Sep 10 13:20:32.313 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7425]: Received disconnect from 10.100.3.1 port 60521:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:20:32.313 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7425]: Disconnected from user cisco 10.100.3.1 port 60521 RP/0/RP0/CPU0:Sep 10 13:20:32.911 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7476]: Accepted authentication/pam for cisco from 10.100.3.1 port 60524 ssh2 RP/0/RP0/CPU0:Sep 10 13:20:36.305 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7481]: Received disconnect from 10.100.3.1 port 60524:11: disconnected by user RP/0/RP0/CPU0:Sep 10 13:20:36.305 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7481]: Disconnected from user cisco 10.100.3.1 port 60524 RP/0/RP0/CPU0:Sep 10 13:20:37.030 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7542]: Accepted authentication/pam for cisco from 10.100.3.1 port 60528 ssh2 RP/0/RP0/CPU0:Sep 10 13:20:38.991 UTC: logger[69035]: %OS-SYSLOG-6-LOG_INFO : informational STEP2-BEGIN