RP/0/RP0/CPU0:CE-B1#show logging start Sep 20 04:54:58 Sun Sep 20 04:59:38.607 UTC Time Zone UTC, DST disabled Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: Disabled Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 0 messages logged Buffer logging: level debugging, 80 messages logged Log Buffer (2097152 bytes): RP/0/RP0/CPU0:Sep 20 04:54:58.543 UTC: logger[67361]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN RP/0/RP0/CPU0:Sep 20 04:54:58.876 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5874]: Received disconnect from 10.20.1.1 port 36428:11: disconnected by user RP/0/RP0/CPU0:Sep 20 04:54:58.876 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5874]: Disconnected from user cisco 10.20.1.1 port 36428 RP/0/RP0/CPU0:Sep 20 04:57:42.862 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6142]: Accepted authentication/pam for cisco from 10.20.1.1 port 36364 ssh2 RP/0/RP0/CPU0:Sep 20 04:58:40.571 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6147]: Received disconnect from 10.20.1.1 port 36364:11: disconnected by user RP/0/RP0/CPU0:Sep 20 04:58:40.571 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6147]: Disconnected from user cisco 10.20.1.1 port 36364 RP/0/RP0/CPU0:Sep 20 04:59:30.546 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6367]: Accepted authentication/pam for cisco from 10.20.1.1 port 39702 ssh2 RP/0/RP0/CPU0:Sep 20 04:59:35.727 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6376]: Received disconnect from 10.20.1.1 port 39702:11: disconnected by user RP/0/RP0/CPU0:Sep 20 04:59:35.727 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6376]: Disconnected from user cisco 10.20.1.1 port 39702 RP/0/RP0/CPU0:Sep 20 04:59:36.545 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6469]: Accepted authentication/pam for cisco from 10.20.1.1 port 56944 ssh2