RP/0/RP0/CPU0:R1#show logging start Sep 22 15:38:44 Tue Sep 22 15:44:23.077 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 134 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 22 15:38:45.065 UTC: logger[65653]: %OS-SYSLOG-6-LOG_INFO : informational STEP2-BEGIN RP/0/RP0/CPU0:Sep 22 15:38:45.421 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8263]: Received disconnect from 10.20.1.1 port 36518:11: disconnected by user RP/0/RP0/CPU0:Sep 22 15:38:45.421 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8263]: Disconnected from user cisco 10.20.1.1 port 36518 RP/0/RP0/CPU0:Sep 22 15:43:54.707 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8694]: Accepted authentication/pam for cisco from 10.20.1.1 port 42524 ssh2 RP/0/RP0/CPU0:Sep 22 15:44:09.077 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8699]: Received disconnect from 10.20.1.1 port 42524:11: disconnected by user RP/0/RP0/CPU0:Sep 22 15:44:09.077 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8699]: Disconnected from user cisco 10.20.1.1 port 42524 RP/0/RP0/CPU0:Sep 22 15:44:09.884 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8801]: Accepted authentication/pam for cisco from 10.20.1.1 port 52698 ssh2 RP/0/RP0/CPU0:Sep 22 15:44:19.512 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8807]: Received disconnect from 10.20.1.1 port 52698:11: disconnected by user RP/0/RP0/CPU0:Sep 22 15:44:19.512 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8807]: Disconnected from user cisco 10.20.1.1 port 52698 RP/0/RP0/CPU0:Sep 22 15:44:20.675 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8953]: Accepted authentication/pam for cisco from 10.20.1.1 port 41300 ssh2