RP/0/RP0/CPU0:P1#show logging start Sep 22 07:23:38 Tue Sep 22 07:30:56.637 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 81 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 22 07:23:38.903 UTC: logger[67321]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN RP/0/RP0/CPU0:Sep 22 07:23:39.214 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5834]: Received disconnect from 10.20.1.1 port 37802:11: disconnected by user RP/0/RP0/CPU0:Sep 22 07:23:39.214 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5834]: Disconnected from user cisco 10.20.1.1 port 37802 RP/0/RP0/CPU0:Sep 22 07:27:50.802 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6178]: Accepted authentication/pam for cisco from 10.20.1.1 port 35460 ssh2 RP/0/RP0/CPU0:Sep 22 07:27:55.727 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6183]: Received disconnect from 10.20.1.1 port 35460:11: disconnected by user RP/0/RP0/CPU0:Sep 22 07:27:55.727 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6183]: Disconnected from user cisco 10.20.1.1 port 35460 RP/0/RP0/CPU0:Sep 22 07:30:48.093 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6502]: Accepted authentication/pam for cisco from 10.20.1.1 port 57082 ssh2 RP/0/RP0/CPU0:Sep 22 07:30:53.500 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6510]: Received disconnect from 10.20.1.1 port 57082:11: disconnected by user RP/0/RP0/CPU0:Sep 22 07:30:53.500 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6510]: Disconnected from user cisco 10.20.1.1 port 57082 RP/0/RP0/CPU0:Sep 22 07:30:54.338 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6599]: Accepted authentication/pam for cisco from 10.20.1.1 port 57144 ssh2