RP/0/RP0/CPU0:R1#show logging start Sep 22 15:44:38 Tue Sep 22 15:49:14.374 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 153 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 22 15:44:38.276 UTC: logger[66596]: %OS-SYSLOG-6-LOG_INFO : informational STEP3-BEGIN RP/0/RP0/CPU0:Sep 22 15:44:38.802 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9205]: Received disconnect from 10.20.1.1 port 40790:11: disconnected by user RP/0/RP0/CPU0:Sep 22 15:44:38.802 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9205]: Disconnected from user cisco 10.20.1.1 port 40790 RP/0/RP0/CPU0:Sep 22 15:48:46.072 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9581]: Accepted authentication/pam for cisco from 10.20.1.1 port 35264 ssh2 RP/0/RP0/CPU0:Sep 22 15:48:59.675 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9586]: Received disconnect from 10.20.1.1 port 35264:11: disconnected by user RP/0/RP0/CPU0:Sep 22 15:48:59.675 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9586]: Disconnected from user cisco 10.20.1.1 port 35264 RP/0/RP0/CPU0:Sep 22 15:49:00.705 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9685]: Accepted authentication/pam for cisco from 10.20.1.1 port 53622 ssh2 RP/0/RP0/CPU0:Sep 22 15:49:10.891 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9691]: Received disconnect from 10.20.1.1 port 53622:11: disconnected by user RP/0/RP0/CPU0:Sep 22 15:49:10.891 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9691]: Disconnected from user cisco 10.20.1.1 port 53622 RP/0/RP0/CPU0:Sep 22 15:49:11.721 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9827]: Accepted authentication/pam for cisco from 10.20.1.1 port 36954 ssh2