RP/0/RP0/CPU0:R1#show logging start Sep 20 13:39:38 Sun Sep 20 13:44:54.440 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 112 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 20 13:39:38.241 UTC: logger[65657]: %OS-SYSLOG-6-LOG_INFO : informational STEP2-BEGIN RP/0/RP0/CPU0:Sep 20 13:39:38.753 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8266]: Received disconnect from 10.20.1.1 port 57630:11: disconnected by user RP/0/RP0/CPU0:Sep 20 13:39:38.753 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8266]: Disconnected from user cisco 10.20.1.1 port 57630 RP/0/RP0/CPU0:Sep 20 13:43:45.376 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8638]: Accepted authentication/pam for cisco from 10.20.1.1 port 35212 ssh2 RP/0/RP0/CPU0:Sep 20 13:44:41.378 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8643]: Received disconnect from 10.20.1.1 port 35212:11: disconnected by user RP/0/RP0/CPU0:Sep 20 13:44:41.378 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8643]: Disconnected from user cisco 10.20.1.1 port 35212 RP/0/RP0/CPU0:Sep 20 13:44:42.709 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8785]: Accepted authentication/pam for cisco from 10.20.1.1 port 42180 ssh2 RP/0/RP0/CPU0:Sep 20 13:44:51.342 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8794]: Received disconnect from 10.20.1.1 port 42180:11: disconnected by user RP/0/RP0/CPU0:Sep 20 13:44:51.342 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8794]: Disconnected from user cisco 10.20.1.1 port 42180 RP/0/RP0/CPU0:Sep 20 13:44:52.342 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8914]: Accepted authentication/pam for cisco from 10.20.1.1 port 53944 ssh2