RP/0/RP0/CPU0:R1#show logging start Sep 22 08:51:59 Tue Sep 22 08:56:45.156 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 133 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 22 08:51:59.379 UTC: logger[69515]: %OS-SYSLOG-6-LOG_INFO : informational STEP2-BEGIN RP/0/RP0/CPU0:Sep 22 08:51:59.763 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8025]: Received disconnect from 10.20.1.1 port 57280:11: disconnected by user RP/0/RP0/CPU0:Sep 22 08:51:59.763 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8025]: Disconnected from user cisco 10.20.1.1 port 57280 RP/0/RP0/CPU0:Sep 22 08:56:26.755 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8439]: Accepted authentication/pam for cisco from 10.20.1.1 port 39368 ssh2 RP/0/RP0/CPU0:Sep 22 08:56:32.705 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8444]: Received disconnect from 10.20.1.1 port 39368:11: disconnected by user RP/0/RP0/CPU0:Sep 22 08:56:32.705 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8444]: Disconnected from user cisco 10.20.1.1 port 39368 RP/0/RP0/CPU0:Sep 22 08:56:33.793 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8518]: Accepted authentication/pam for cisco from 10.20.1.1 port 54856 ssh2 RP/0/RP0/CPU0:Sep 22 08:56:41.964 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8527]: Received disconnect from 10.20.1.1 port 54856:11: disconnected by user RP/0/RP0/CPU0:Sep 22 08:56:41.965 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8527]: Disconnected from user cisco 10.20.1.1 port 54856 RP/0/RP0/CPU0:Sep 22 08:56:43.119 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8648]: Accepted authentication/pam for cisco from 10.20.1.1 port 54392 ssh2