RP/0/RP0/CPU0:PE1#show logging start Oct 12 02:50:00 Mon Oct 12 02:51:10.397 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 81 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Oct 12 02:50:00.402 UTC: logger[66940]: %OS-SYSLOG-6-LOG_INFO : informational STEP0-BEGIN RP/0/RP0/CPU0:Oct 12 02:50:00.956 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5454]: Received disconnect from 10.20.1.1 port 45500:11: disconnected by user RP/0/RP0/CPU0:Oct 12 02:50:00.956 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5454]: Disconnected from user cisco 10.20.1.1 port 45500 RP/0/RP0/CPU0:Oct 12 02:50:23.362 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5612]: Accepted authentication/pam for cisco from 10.20.1.1 port 38924 ssh2 RP/0/RP0/CPU0:Oct 12 02:50:27.267 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5617]: Received disconnect from 10.20.1.1 port 38924:11: disconnected by user RP/0/RP0/CPU0:Oct 12 02:50:27.267 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5617]: Disconnected from user cisco 10.20.1.1 port 38924 RP/0/RP0/CPU0:Oct 12 02:50:44.951 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5686]: Accepted authentication/pam for cisco from 10.20.1.1 port 33370 ssh2 RP/0/RP0/CPU0:Oct 12 02:51:07.464 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5691]: Received disconnect from 10.20.1.1 port 33370:11: disconnected by user RP/0/RP0/CPU0:Oct 12 02:51:07.465 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5691]: Disconnected from user cisco 10.20.1.1 port 33370 RP/0/RP0/CPU0:Oct 12 02:51:08.361 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5986]: Accepted authentication/pam for cisco from 10.20.1.1 port 60224 ssh2