*Sep 22 11:44:00.583: %KAZULOG-6-STEPMARK: Message from tty434(user id: cisco): STEP5-BEGIN-20260922-202821
*Sep 22 11:44:00.618: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.20.1.1 (tty = 0) for user 'cisco' using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 22 11:44:01.032: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:44:01.405: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.20.1.1] [localport: 22] at 11:44:01 UTC Tue Sep 22 2026
*Sep 22 11:44:01.406: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:44:01.713: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.20.1.1 (tty = 0) for user 'cisco' using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 22 11:44:02.096: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:44:02.442: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.20.1.1] [localport: 22] at 11:44:02 UTC Tue Sep 22 2026
*Sep 22 11:44:02.442: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:44:02.933: %SYS-5-CONFIG_I: Configured from console by cisco on vty0 (10.20.1.1)
*Sep 22 11:44:03.149: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.20.1.1 (tty = 0) for user 'cisco' using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 22 11:45:47.346: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:45:47.711: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.20.1.1] [localport: 22] at 11:45:47 UTC Tue Sep 22 2026
*Sep 22 11:45:47.711: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:45:47.967: %SYS-6-LOGOUT: User cisco has exited tty session 434(10.20.1.1)
*Sep 22 11:45:47.967: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.20.1.1 (tty = 0) for user 'cisco' using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 22 11:47:33.382: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:47:33.699: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.20.1.1] [localport: 22] at 11:47:33 UTC Tue Sep 22 2026
*Sep 22 11:47:33.700: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:47:35.932: %SYS-6-LOGOUT: User cisco has exited tty session 434(10.20.1.1)
*Sep 22 11:47:35.932: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.20.1.1 (tty = 0) for user 'cisco' using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 22 11:47:36.266: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:47:36.621: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.20.1.1] [localport: 22] at 11:47:36 UTC Tue Sep 22 2026