RP/0/RP0/CPU0:CE-A1#show logging start Sep 23 15:48:26 Wed Sep 23 15:52:07.083 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 119 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 23 15:48:26.125 UTC: logger[69198]: %OS-SYSLOG-6-LOG_INFO : informational STEP4-BEGIN RP/0/RP0/CPU0:Sep 23 15:48:26.478 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7707]: Received disconnect from 10.20.1.1 port 36624:11: disconnected by user RP/0/RP0/CPU0:Sep 23 15:48:26.478 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7707]: Disconnected from user cisco 10.20.1.1 port 36624 RP/0/RP0/CPU0:Sep 23 15:49:58.542 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7851]: Accepted authentication/pam for cisco from 10.20.1.1 port 45850 ssh2 RP/0/RP0/CPU0:Sep 23 15:50:20.549 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7856]: Received disconnect from 10.20.1.1 port 45850:11: disconnected by user RP/0/RP0/CPU0:Sep 23 15:50:20.549 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7856]: Disconnected from user cisco 10.20.1.1 port 45850 RP/0/RP0/CPU0:Sep 23 15:51:58.322 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8110]: Accepted authentication/pam for cisco from 10.20.1.1 port 59376 ssh2 RP/0/RP0/CPU0:Sep 23 15:52:04.047 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8115]: Received disconnect from 10.20.1.1 port 59376:11: disconnected by user RP/0/RP0/CPU0:Sep 23 15:52:04.048 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8115]: Disconnected from user cisco 10.20.1.1 port 59376 RP/0/RP0/CPU0:Sep 23 15:52:04.850 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8211]: Accepted authentication/pam for cisco from 10.20.1.1 port 59800 ssh2