RP/0/RP0/CPU0:P1#show logging start Sep 22 16:04:31 Tue Sep 22 16:08:47.646 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 102 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 22 16:04:31.824 UTC: logger[67983]: %OS-SYSLOG-6-LOG_INFO : informational STEP2-BEGIN RP/0/RP0/CPU0:Sep 22 16:04:32.166 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6497]: Received disconnect from 10.20.1.1 port 42102:11: disconnected by user RP/0/RP0/CPU0:Sep 22 16:04:32.166 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6497]: Disconnected from user cisco 10.20.1.1 port 42102 RP/0/RP0/CPU0:Sep 22 16:07:29.229 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6771]: Accepted authentication/pam for cisco from 10.20.1.1 port 34374 ssh2 RP/0/RP0/CPU0:Sep 22 16:07:33.535 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6776]: Received disconnect from 10.20.1.1 port 34374:11: disconnected by user RP/0/RP0/CPU0:Sep 22 16:07:33.535 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6776]: Disconnected from user cisco 10.20.1.1 port 34374 RP/0/RP0/CPU0:Sep 22 16:08:39.417 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6946]: Accepted authentication/pam for cisco from 10.20.1.1 port 54922 ssh2 RP/0/RP0/CPU0:Sep 22 16:08:44.534 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6954]: Received disconnect from 10.20.1.1 port 54922:11: disconnected by user RP/0/RP0/CPU0:Sep 22 16:08:44.535 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6954]: Disconnected from user cisco 10.20.1.1 port 54922 RP/0/RP0/CPU0:Sep 22 16:08:45.353 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7039]: Accepted authentication/pam for cisco from 10.20.1.1 port 53218 ssh2