RP/0/RP0/CPU0:CE-A1a#show logging start Oct 12 00:27:57 Mon Oct 12 00:33:53.513 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 91 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Oct 12 00:27:57.130 UTC: logger[67609]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN RP/0/RP0/CPU0:Oct 12 00:27:57.444 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6123]: Received disconnect from 10.20.1.1 port 57440:11: disconnected by user RP/0/RP0/CPU0:Oct 12 00:27:57.444 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6123]: Disconnected from user cisco 10.20.1.1 port 57440 RP/0/RP0/CPU0:Oct 12 00:30:52.909 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6416]: Accepted authentication/pam for cisco from 10.20.1.1 port 51754 ssh2 RP/0/RP0/CPU0:Oct 12 00:31:01.740 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6421]: Received disconnect from 10.20.1.1 port 51754:11: disconnected by user RP/0/RP0/CPU0:Oct 12 00:31:01.740 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6421]: Disconnected from user cisco 10.20.1.1 port 51754 RP/0/RP0/CPU0:Oct 12 00:33:39.357 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6739]: Accepted authentication/pam for cisco from 10.20.1.1 port 59764 ssh2 RP/0/RP0/CPU0:Oct 12 00:33:50.733 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6744]: Received disconnect from 10.20.1.1 port 59764:11: disconnected by user RP/0/RP0/CPU0:Oct 12 00:33:50.733 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6744]: Disconnected from user cisco 10.20.1.1 port 59764 RP/0/RP0/CPU0:Oct 12 00:33:51.380 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6903]: Accepted authentication/pam for cisco from 10.20.1.1 port 34864 ssh2