RP/0/RP0/CPU0:R2#show logging start Sep 22 08:45:05 Tue Sep 22 08:47:55.487 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 98 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 22 08:45:05.503 UTC: logger[68012]: %OS-SYSLOG-6-LOG_INFO : informational STEP0-BEGIN RP/0/RP0/CPU0:Sep 22 08:45:05.881 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6525]: Received disconnect from 10.20.1.1 port 34398:11: disconnected by user RP/0/RP0/CPU0:Sep 22 08:45:05.881 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6525]: Disconnected from user cisco 10.20.1.1 port 34398 RP/0/RP0/CPU0:Sep 22 08:47:35.815 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6767]: Accepted authentication/pam for cisco from 10.20.1.1 port 35996 ssh2 RP/0/RP0/CPU0:Sep 22 08:47:42.409 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6772]: Received disconnect from 10.20.1.1 port 35996:11: disconnected by user RP/0/RP0/CPU0:Sep 22 08:47:42.409 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6772]: Disconnected from user cisco 10.20.1.1 port 35996 RP/0/RP0/CPU0:Sep 22 08:47:43.399 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6844]: Accepted authentication/pam for cisco from 10.20.1.1 port 55242 ssh2 RP/0/RP0/CPU0:Sep 22 08:47:52.383 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6851]: Received disconnect from 10.20.1.1 port 55242:11: disconnected by user RP/0/RP0/CPU0:Sep 22 08:47:52.383 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6851]: Disconnected from user cisco 10.20.1.1 port 55242 RP/0/RP0/CPU0:Sep 22 08:47:53.415 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6981]: Accepted authentication/pam for cisco from 10.20.1.1 port 55712 ssh2