RP/0/RP0/CPU0:CE-B1#show logging start Sep 21 09:22:08 Mon Sep 21 09:31:39.731 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 117 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 21 09:22:08.989 UTC: logger[66062]: %OS-SYSLOG-6-LOG_INFO : informational STEP2-BEGIN RP/0/RP0/CPU0:Sep 21 09:22:09.297 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8667]: Received disconnect from 10.20.1.1 port 41496:11: disconnected by user RP/0/RP0/CPU0:Sep 21 09:22:09.297 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8667]: Disconnected from user cisco 10.20.1.1 port 41496 RP/0/RP0/CPU0:Sep 21 09:29:32.711 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9289]: Accepted authentication/pam for cisco from 10.20.1.1 port 35388 ssh2 RP/0/RP0/CPU0:Sep 21 09:29:39.879 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9298]: Received disconnect from 10.20.1.1 port 35388:11: disconnected by user RP/0/RP0/CPU0:Sep 21 09:29:39.879 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9298]: Disconnected from user cisco 10.20.1.1 port 35388 RP/0/RP0/CPU0:Sep 21 09:31:32.406 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9528]: Accepted authentication/pam for cisco from 10.20.1.1 port 42506 ssh2 RP/0/RP0/CPU0:Sep 21 09:31:35.862 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9533]: Received disconnect from 10.20.1.1 port 42506:11: disconnected by user RP/0/RP0/CPU0:Sep 21 09:31:35.863 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9533]: Disconnected from user cisco 10.20.1.1 port 42506 RP/0/RP0/CPU0:Sep 21 09:31:37.243 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9617]: Accepted authentication/pam for cisco from 10.20.1.1 port 42520 ssh2