RP/0/RP0/CPU0:CE1#show logging start Sep 27 16:20:59 Sun Sep 27 16:27:26.210 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 101 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 27 16:20:59.432 UTC: logger[67653]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN RP/0/RP0/CPU0:Sep 27 16:20:59.726 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6166]: Received disconnect from 10.20.1.1 port 49202:11: disconnected by user RP/0/RP0/CPU0:Sep 27 16:20:59.726 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6166]: Disconnected from user cisco 10.20.1.1 port 49202 RP/0/RP0/CPU0:Sep 27 16:23:43.182 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6437]: Accepted authentication/pam for cisco from 10.20.1.1 port 50366 ssh2 RP/0/RP0/CPU0:Sep 27 16:24:21.183 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6446]: Received disconnect from 10.20.1.1 port 50366:11: disconnected by user RP/0/RP0/CPU0:Sep 27 16:24:21.183 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6446]: Disconnected from user cisco 10.20.1.1 port 50366 RP/0/RP0/CPU0:Sep 27 16:27:16.351 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6793]: Accepted authentication/pam for cisco from 10.20.1.1 port 41430 ssh2 RP/0/RP0/CPU0:Sep 27 16:27:23.213 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6805]: Received disconnect from 10.20.1.1 port 41430:11: disconnected by user RP/0/RP0/CPU0:Sep 27 16:27:23.213 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6805]: Disconnected from user cisco 10.20.1.1 port 41430 RP/0/RP0/CPU0:Sep 27 16:27:24.388 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6942]: Accepted authentication/pam for cisco from 10.20.1.1 port 55860 ssh2