RP/0/RP0/CPU0:P1#show logging start Oct 12 04:53:09 Mon Oct 12 04:56:17.016 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 78 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Oct 12 04:53:09.809 UTC: logger[66970]: %OS-SYSLOG-6-LOG_INFO : informational STEP0-BEGIN RP/0/RP0/CPU0:Oct 12 04:53:10.130 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5484]: Received disconnect from 10.20.1.1 port 41552:11: disconnected by user RP/0/RP0/CPU0:Oct 12 04:53:10.131 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5484]: Disconnected from user cisco 10.20.1.1 port 41552 RP/0/RP0/CPU0:Oct 12 04:53:37.333 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5576]: Accepted authentication/pam for cisco from 10.20.1.1 port 48224 ssh2 RP/0/RP0/CPU0:Oct 12 04:53:41.145 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5590]: Received disconnect from 10.20.1.1 port 48224:11: disconnected by user RP/0/RP0/CPU0:Oct 12 04:53:41.145 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5590]: Disconnected from user cisco 10.20.1.1 port 48224 RP/0/RP0/CPU0:Oct 12 04:56:05.112 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5818]: Accepted authentication/pam for cisco from 10.20.1.1 port 35100 ssh2 RP/0/RP0/CPU0:Oct 12 04:56:14.218 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5823]: Received disconnect from 10.20.1.1 port 35100:11: disconnected by user RP/0/RP0/CPU0:Oct 12 04:56:14.218 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5823]: Disconnected from user cisco 10.20.1.1 port 35100 RP/0/RP0/CPU0:Oct 12 04:56:14.935 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5968]: Accepted authentication/pam for cisco from 10.20.1.1 port 35814 ssh2