RP/0/RP0/CPU0:P1#show logging start Oct 12 03:03:25 Mon Oct 12 03:08:48.317 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 114 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Oct 12 03:03:25.114 UTC: logger[68980]: %OS-SYSLOG-6-LOG_INFO : informational STEP3-BEGIN RP/0/RP0/CPU0:Oct 12 03:03:25.426 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7493]: Received disconnect from 10.20.1.1 port 58534:11: disconnected by user RP/0/RP0/CPU0:Oct 12 03:03:25.426 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7493]: Disconnected from user cisco 10.20.1.1 port 58534 RP/0/RP0/CPU0:Oct 12 03:06:58.883 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7789]: Accepted authentication/pam for cisco from 10.20.1.1 port 34602 ssh2 RP/0/RP0/CPU0:Oct 12 03:07:02.312 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7794]: Received disconnect from 10.20.1.1 port 34602:11: disconnected by user RP/0/RP0/CPU0:Oct 12 03:07:02.312 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7794]: Disconnected from user cisco 10.20.1.1 port 34602 RP/0/RP0/CPU0:Oct 12 03:08:36.095 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8003]: Accepted authentication/pam for cisco from 10.20.1.1 port 52824 ssh2 RP/0/RP0/CPU0:Oct 12 03:08:45.535 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8012]: Received disconnect from 10.20.1.1 port 52824:11: disconnected by user RP/0/RP0/CPU0:Oct 12 03:08:45.535 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8012]: Disconnected from user cisco 10.20.1.1 port 52824 RP/0/RP0/CPU0:Oct 12 03:08:46.397 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8157]: Accepted authentication/pam for cisco from 10.20.1.1 port 42458 ssh2