RP/0/RP0/CPU0:CE-A1b#show logging start Oct 12 00:34:25 Mon Oct 12 00:40:11.522 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 116 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Oct 12 00:34:25.812 UTC: logger[68745]: %OS-SYSLOG-6-LOG_INFO : informational STEP2-BEGIN RP/0/RP0/CPU0:Oct 12 00:34:26.103 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7254]: Received disconnect from 10.20.1.1 port 37782:11: disconnected by user RP/0/RP0/CPU0:Oct 12 00:34:26.103 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7254]: Disconnected from user cisco 10.20.1.1 port 37782 RP/0/RP0/CPU0:Oct 12 00:37:09.351 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7483]: Accepted authentication/pam for cisco from 10.20.1.1 port 50822 ssh2 RP/0/RP0/CPU0:Oct 12 00:37:17.812 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7488]: Received disconnect from 10.20.1.1 port 50822:11: disconnected by user RP/0/RP0/CPU0:Oct 12 00:37:17.812 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7488]: Disconnected from user cisco 10.20.1.1 port 50822 RP/0/RP0/CPU0:Oct 12 00:39:57.071 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7833]: Accepted authentication/pam for cisco from 10.20.1.1 port 41730 ssh2 RP/0/RP0/CPU0:Oct 12 00:40:08.728 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7838]: Received disconnect from 10.20.1.1 port 41730:11: disconnected by user RP/0/RP0/CPU0:Oct 12 00:40:08.728 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7838]: Disconnected from user cisco 10.20.1.1 port 41730 RP/0/RP0/CPU0:Oct 12 00:40:09.587 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8019]: Accepted authentication/pam for cisco from 10.20.1.1 port 50142 ssh2