RP/0/RP0/CPU0:CE-A1b#show logging start Oct 12 05:03:10 Mon Oct 12 05:09:04.126 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 125 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Oct 12 05:03:10.534 UTC: logger[68621]: %OS-SYSLOG-6-LOG_INFO : informational STEP2-BEGIN RP/0/RP0/CPU0:Oct 12 05:03:10.799 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7134]: Received disconnect from 10.20.1.1 port 42150:11: disconnected by user RP/0/RP0/CPU0:Oct 12 05:03:10.799 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7134]: Disconnected from user cisco 10.20.1.1 port 42150 RP/0/RP0/CPU0:Oct 12 05:05:46.707 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7388]: Accepted authentication/pam for cisco from 10.20.1.1 port 38914 ssh2 RP/0/RP0/CPU0:Oct 12 05:05:52.395 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7393]: Received disconnect from 10.20.1.1 port 38914:11: disconnected by user RP/0/RP0/CPU0:Oct 12 05:05:52.395 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7393]: Disconnected from user cisco 10.20.1.1 port 38914 RP/0/RP0/CPU0:Oct 12 05:08:50.216 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7726]: Accepted authentication/pam for cisco from 10.20.1.1 port 38366 ssh2 RP/0/RP0/CPU0:Oct 12 05:09:01.264 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7735]: Received disconnect from 10.20.1.1 port 38366:11: disconnected by user RP/0/RP0/CPU0:Oct 12 05:09:01.264 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7735]: Disconnected from user cisco 10.20.1.1 port 38366 RP/0/RP0/CPU0:Oct 12 05:09:02.263 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7891]: Accepted authentication/pam for cisco from 10.20.1.1 port 53698 ssh2