RP/0/RP0/CPU0:PE1#show logging start Oct 12 04:53:06 Mon Oct 12 04:54:32.280 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 91 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Oct 12 04:53:06.805 UTC: logger[67217]: %OS-SYSLOG-6-LOG_INFO : informational STEP0-BEGIN RP/0/RP0/CPU0:Oct 12 04:53:07.111 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5731]: Received disconnect from 10.20.1.1 port 38312:11: disconnected by user RP/0/RP0/CPU0:Oct 12 04:53:07.111 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5731]: Disconnected from user cisco 10.20.1.1 port 38312 RP/0/RP0/CPU0:Oct 12 04:53:32.183 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5836]: Accepted authentication/pam for cisco from 10.20.1.1 port 38398 ssh2 RP/0/RP0/CPU0:Oct 12 04:53:36.523 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5841]: Received disconnect from 10.20.1.1 port 38398:11: disconnected by user RP/0/RP0/CPU0:Oct 12 04:53:36.523 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5841]: Disconnected from user cisco 10.20.1.1 port 38398 RP/0/RP0/CPU0:Oct 12 04:54:05.480 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5925]: Accepted authentication/pam for cisco from 10.20.1.1 port 44242 ssh2 RP/0/RP0/CPU0:Oct 12 04:54:29.400 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5930]: Received disconnect from 10.20.1.1 port 44242:11: disconnected by user RP/0/RP0/CPU0:Oct 12 04:54:29.400 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5930]: Disconnected from user cisco 10.20.1.1 port 44242 RP/0/RP0/CPU0:Oct 12 04:54:30.134 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6271]: Accepted authentication/pam for cisco from 10.20.1.1 port 55456 ssh2