User ID Logs

User ID log of an SSH session established by SCP client

The switch logs the user ID of an SSH session initiated by the SCP client. If an SCP client establishes an SSH session, the message appears in the following format:

CP1 [08/06/15 09:43:42.230:UTC] 0x000d8602 00000000 GlobalRouter SSH INFO SSH user authentication succeeded for user rwa on host 10.68.231.194
CP1 [08/06/15 09:43:42.232:UTC] 0x000d8602 00000000 GlobalRouter SSH INFO SSH SCP session start by  user rwa on host 10.68.231.194
CP1 [08/06/15 09:43:44.020:UTC] 0x000d8602 00000000 GlobalRouter SSH INFO SCP session closed by  user rwa on host 10.68.231.194
CP1 [08/06/15 09:43:44.021:UTC] 0x000d8602 00000000 GlobalRouter SSH INFO SSH session closed by user rwa on host 10.68.231.194


            
In the preceding example log output, rwa is the user name.


        


        
User ID log of an SSH session
                established by SFTP

            
            
The switch logs the user ID of an SSH session initiated by SFTP. If SFTP establishes
                an SSH session, the message appears in the following format:


            
CP1  [08/06/15 09:45:32.903:UTC] 0x000d8602 00000000 GlobalRouter SSH INFO SSH user authentication succeeded for user rwa on host 10.68.231.194
CP1  [08/06/15 09:45:32.905:UTC] 0x000d8602 00000000 GlobalRouter SSH INFO SFTP session start: user rwa on host 10.68.231.194
CP1  [08/06/15 09:45:46.775:UTC] 0x000d8602 00000000 GlobalRouter SSH INFO SFTP session closed by  user rwa on host 10.68.231.194
CP1  [08/06/15 09:45:46.776:UTC] 0x000d8602 00000000 GlobalRouter SSH INFO SSH SFTP session end: user rwa on host 10.68.231.194
CP1  [08/06/15 09:45:46.776:UTC] 0x000d8602 00000000 GlobalRouter SSH INFO SSH session closed by server for user rwa on host 10.68.231.194


            
In the preceding example log output, rwa is the user name.


        


    

 9036830-00 Rev AD