RP/0/RP0/CPU0:CE1#show logging start Sep 27 16:27:33 Sun Sep 27 16:33:09.813 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 117 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 27 16:27:33.730 UTC: logger[68561]: %OS-SYSLOG-6-LOG_INFO : informational STEP2-BEGIN RP/0/RP0/CPU0:Sep 27 16:27:34.032 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7074]: Received disconnect from 10.20.1.1 port 48310:11: disconnected by user RP/0/RP0/CPU0:Sep 27 16:27:34.064 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7074]: Disconnected from user cisco 10.20.1.1 port 48310 RP/0/RP0/CPU0:Sep 27 16:30:22.478 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7358]: Accepted authentication/pam for cisco from 10.20.1.1 port 49126 ssh2 RP/0/RP0/CPU0:Sep 27 16:30:30.922 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7374]: Received disconnect from 10.20.1.1 port 49126:11: disconnected by user RP/0/RP0/CPU0:Sep 27 16:30:30.922 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7374]: Disconnected from user cisco 10.20.1.1 port 49126 RP/0/RP0/CPU0:Sep 27 16:32:59.909 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7668]: Accepted authentication/pam for cisco from 10.20.1.1 port 47610 ssh2 RP/0/RP0/CPU0:Sep 27 16:33:06.894 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7673]: Received disconnect from 10.20.1.1 port 47610:11: disconnected by user RP/0/RP0/CPU0:Sep 27 16:33:06.894 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7673]: Disconnected from user cisco 10.20.1.1 port 47610 RP/0/RP0/CPU0:Sep 27 16:33:07.703 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7811]: Accepted authentication/pam for cisco from 10.20.1.1 port 39246 ssh2