RP/0/RP0/CPU0:CE-A1#show logging start Sep 22 16:00:23 Tue Sep 22 16:04:39.425 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 83 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 22 16:00:23.344 UTC: logger[67307]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN RP/0/RP0/CPU0:Sep 22 16:00:23.756 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5815]: Received disconnect from 10.20.1.1 port 55558:11: disconnected by user RP/0/RP0/CPU0:Sep 22 16:00:23.757 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5815]: Disconnected from user cisco 10.20.1.1 port 55558 RP/0/RP0/CPU0:Sep 22 16:02:44.377 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6019]: Accepted authentication/pam for cisco from 10.20.1.1 port 52004 ssh2 RP/0/RP0/CPU0:Sep 22 16:02:59.120 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6024]: Received disconnect from 10.20.1.1 port 52004:11: disconnected by user RP/0/RP0/CPU0:Sep 22 16:02:59.121 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6024]: Disconnected from user cisco 10.20.1.1 port 52004 RP/0/RP0/CPU0:Sep 22 16:04:33.078 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6310]: Accepted authentication/pam for cisco from 10.20.1.1 port 42630 ssh2 RP/0/RP0/CPU0:Sep 22 16:04:36.674 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6315]: Received disconnect from 10.20.1.1 port 42630:11: disconnected by user RP/0/RP0/CPU0:Sep 22 16:04:36.674 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6315]: Disconnected from user cisco 10.20.1.1 port 42630 RP/0/RP0/CPU0:Sep 22 16:04:37.486 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6386]: Accepted authentication/pam for cisco from 10.20.1.1 port 42644 ssh2