RP/0/RP0/CPU0:R4#show logging start Sep 20 13:37:24 Sun Sep 20 13:41:49.086 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 85 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 20 13:37:24.202 UTC: logger[69203]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN RP/0/RP0/CPU0:Sep 20 13:37:24.587 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7712]: Received disconnect from 10.20.1.1 port 41106:11: disconnected by user RP/0/RP0/CPU0:Sep 20 13:37:24.587 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7712]: Disconnected from user cisco 10.20.1.1 port 41106 RP/0/RP0/CPU0:Sep 20 13:41:29.981 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8080]: Accepted authentication/pam for cisco from 10.20.1.1 port 46662 ssh2 RP/0/RP0/CPU0:Sep 20 13:41:36.813 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8085]: Received disconnect from 10.20.1.1 port 46662:11: disconnected by user RP/0/RP0/CPU0:Sep 20 13:41:36.813 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8085]: Disconnected from user cisco 10.20.1.1 port 46662 RP/0/RP0/CPU0:Sep 20 13:41:37.712 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8158]: Accepted authentication/pam for cisco from 10.20.1.1 port 60002 ssh2 RP/0/RP0/CPU0:Sep 20 13:41:45.705 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8163]: Received disconnect from 10.20.1.1 port 60002:11: disconnected by user RP/0/RP0/CPU0:Sep 20 13:41:45.705 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8163]: Disconnected from user cisco 10.20.1.1 port 60002 RP/0/RP0/CPU0:Sep 20 13:41:46.935 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8280]: Accepted authentication/pam for cisco from 10.20.1.1 port 53886 ssh2