RP/0/RP0/CPU0:CE-A1#show logging start Oct 12 03:14:36 Mon Oct 12 03:19:48.487 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 149 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Oct 12 03:14:36.713 UTC: logger[66584]: %OS-SYSLOG-6-LOG_INFO : informational STEP5-BEGIN RP/0/RP0/CPU0:Oct 12 03:14:37.021 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9193]: Received disconnect from 10.20.1.1 port 32878:11: disconnected by user RP/0/RP0/CPU0:Oct 12 03:14:37.021 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9193]: Disconnected from user cisco 10.20.1.1 port 32878 RP/0/RP0/CPU0:Oct 12 03:17:20.000 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9463]: Accepted authentication/pam for cisco from 10.20.1.1 port 60454 ssh2 RP/0/RP0/CPU0:Oct 12 03:17:23.751 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9468]: Received disconnect from 10.20.1.1 port 60454:11: disconnected by user RP/0/RP0/CPU0:Oct 12 03:17:23.751 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9468]: Disconnected from user cisco 10.20.1.1 port 60454 RP/0/RP0/CPU0:Oct 12 03:19:32.556 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9689]: Accepted authentication/pam for cisco from 10.20.1.1 port 57080 ssh2 RP/0/RP0/CPU0:Oct 12 03:19:45.433 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9694]: Received disconnect from 10.20.1.1 port 57080:11: disconnected by user RP/0/RP0/CPU0:Oct 12 03:19:45.433 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9694]: Disconnected from user cisco 10.20.1.1 port 57080 RP/0/RP0/CPU0:Oct 12 03:19:46.426 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9862]: Accepted authentication/pam for cisco from 10.20.1.1 port 57382 ssh2