Nov  9 16:42:11.062 UTC: %SSH-5-SSH2_SESSION: SSH2 Session request from 172.16.226.108 (tty = 1) using crypto cipher '3des-cbc', hmac 'hmac-sha1' Succeeded
Nov  9 16:42:13.045 UTC: AAA/BIND(000024A5): Bind i/f
Nov  9 16:42:13.045 UTC: AAA/AUTHEN/LOGIN (000024A5): Pick method list 'default'
Nov  9 16:42:13.046 UTC: TPLUS: Queuing AAA Authentication request 9381 for processing
Nov  9 16:42:13.046 UTC: TPLUS(000024A5) login timer started 1020 sec timeout
Nov  9 16:42:13.046 UTC: TPLUS: processing authentication start request id 9381
Nov  9 16:42:13.046 UTC: TPLUS: Authentication start packet created for 9381(USERNAME)
Nov  9 16:42:13.046 UTC: TPLUS: Using server 10.1.129.30
Nov  9 16:42:13.046 UTC: TPLUS(000024A5)/0/NB_WAIT/7FFD642D66E8: Started 5 sec timeout
Nov  9 16:42:13.146 UTC: TPLUS(000024A5)/0/NB_WAIT: socket event 2
Nov  9 16:42:13.146 UTC: T+: Version 192 (0xC0), type 1, seq 1, encryption 1, SC 0
Nov  9 16:42:13.146 UTC: T+: session_id 2856806630 (0xAA4768E6), dlen 30 (0x1E)
Nov  9 16:42:13.146 UTC: T+: type:AUTHEN/START, priv_lvl:1 action:LOGIN ascii
Nov  9 16:42:13.146 UTC: T+: svc:LOGIN user_len:4 port_len:4 (0x4) raddr_len:14 (0xE) data_len:0
Nov  9 16:42:13.146 UTC: T+: user:  USERNAME
Nov  9 16:42:13.146 UTC: T+: port:  tty3
Nov  9 16:42:13.146 UTC: T+: rem_addr:  172.16.226.108
Nov  9 16:42:13.146 UTC: T+: data:
Nov  9 16:42:13.146 UTC: T+: End Packet
Nov  9 16:42:13.146 UTC: TPLUS(000024A5)/0/NB_WAIT: wrote entire 42 bytes request
Nov  9 16:42:13.146 UTC: TPLUS(000024A5)/0/READ: socket event 1
Nov  9 16:42:13.146 UTC: TPLUS(000024A5)/0/READ: Would block while reading
Nov  9 16:42:13.215 UTC: TPLUS(000024A5)/0/READ: socket event 1
Nov  9 16:42:13.215 UTC: TPLUS(000024A5)/0/READ: read entire 12 header bytes (expect 16 bytes data)
Nov  9 16:42:13.215 UTC: TPLUS(000024A5)/0/READ: socket event 1
Nov  9 16:42:13.215 UTC: TPLUS(000024A5)/0/READ: read entire 28 bytes response
Nov  9 16:42:13.215 UTC: T+: Version 192 (0xC0), type 1, seq 2, encryption 1, SC 0
Nov  9 16:42:13.215 UTC: T+: session_id 2856806630 (0xAA4768E6), dlen 16 (0x10)
Nov  9 16:42:13.215 UTC: T+: AUTHEN/REPLY status:5 flags:0x1 msg_len:10, data_len:0
Nov  9 16:42:13.215 UTC: T+: msg:  Password:
Nov  9 16:42:13.215 UTC: T+: data:
Nov  9 16:42:13.215 UTC: T+: End Packet
Nov  9 16:42:13.215 UTC: TPLUS(000024A5) login timer stopped
Nov  9 16:42:13.215 UTC: TPLUS(000024A5)/0/7FFD642D66E8: Processing the reply packet
Nov  9 16:42:13.215 UTC: TPLUS: Received authen response status GET_PASSWORD (8)
Nov  9 16:42:13.215 UTC: TPLUS(000024A5)/0/None: Started 120 sec timeout
Nov  9 16:42:13.215 UTC: TPLUS: Queuing AAA Authentication request 9381 for processing
Nov  9 16:42:13.215 UTC: TPLUS(000024A5) login timer started 1020 sec timeout
Nov  9 16:42:13.215 UTC: TPLUS: processing authentication continue request id 9381
Nov  9 16:42:13.215 UTC: TPLUS: Authentication continue packet generated for 9381
Nov  9 16:42:13.215 UTC: TPLUS(000024A5)/0/None: Timer Stoped
Nov  9 16:42:13.215 UTC: TPLUS(000024A5)/0/WRITE/7FFD642D66E8: Started 5 sec timeout
Nov  9 16:42:13.215 UTC: T+: Version 192 (0xC0), type 1, seq 3, encryption 1, SC 0
Nov  9 16:42:13.215 UTC: T+: session_id 2856806630 (0xAA4768E6), dlen 19 (0x13)
Nov  9 16:42:13.215 UTC: T+: AUTHEN/CONT msg_len:14 (0xE), data_len:0 (0x0) flags:0x0
Nov  9 16:42:13.215 UTC: T+: User msg: <elided>
Nov  9 16:42:13.215 UTC: T+: User data:
Nov  9 16:42:13.215 UTC: T+: End Packet
Nov  9 16:42:13.215 UTC: TPLUS(000024A5)/0/WRITE: wrote entire 31 bytes request
Nov  9 16:42:14.143 UTC: TPLUS(000024A5)/0/READ: socket event 1
Nov  9 16:42:14.143 UTC: TPLUS(000024A5)/0/READ: read entire 12 header bytes (expect 6 bytes data)
Nov  9 16:42:14.143 UTC: TPLUS(000024A5)/0/READ: socket event 1
Nov  9 16:42:14.143 UTC: TPLUS(000024A5)/0/READ: read entire 18 bytes response
Nov  9 16:42:14.143 UTC: T+: Version 192 (0xC0), type 1, seq 4, encryption 1, SC 0
Nov  9 16:42:14.143 UTC: T+: session_id 2856806630 (0xAA4768E6), dlen 6 (0x6)
Nov  9 16:42:14.143 UTC: T+: AUTHEN/REPLY status:1 flags:0x0 msg_len:0, data_len:0
Nov  9 16:42:14.143 UTC: T+: msg:
Nov  9 16:42:14.143 UTC: T+: data:
Nov  9 16:42:14.143 UTC: T+: End Packet
Nov  9 16:42:14.143 UTC: TPLUS(000024A5) login timer stopped
Nov  9 16:42:14.143 UTC: TPLUS(000024A5)/0/7FFD642D66E8: Processing the reply packet
Nov  9 16:42:14.143 UTC: TPLUS: Received authen response status PASS (2)
Nov  9 16:42:14.143 UTC: TPLUS: Invalid Client information received as input
Nov  9 16:42:14.145 UTC: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: USERNAME] [Source: 172.16.226.108] [localport: 22] at 16:42:14 UTC Fri Nov 9 2018
Nov  9 16:42:14.145 UTC: %SSH-5-SSH2_USERAUTH: User 'USERNAME' authentication for SSH2 Session from 172.16.226.108 (tty = 1) using crypto cipher '3des-cbc', hmac 'hmac-sha1' Succeeded
Nov  9 16:42:14.584 UTC: TPLUS: Queuing AAA Authorization request 9381 for processing
Nov  9 16:42:14.584 UTC: TPLUS(000024A5) login timer started 1020 sec timeout
Nov  9 16:42:14.584 UTC: TPLUS: processing authorization request id 9381
Nov  9 16:42:14.584 UTC: TPLUS: Protocol set to None .....Skipping
Nov  9 16:42:14.584 UTC: TPLUS: Sending AV service=shell
Nov  9 16:42:14.584 UTC: TPLUS: Sending AV cmd*
Nov  9 16:42:14.584 UTC: TPLUS: Authorization request created for 9381(USERNAME)
Nov  9 16:42:14.584 UTC: TPLUS: using previously set server 10.1.129.30 from group TELNYX
Nov  9 16:42:14.584 UTC: TPLUS(000024A5)/0/NB_WAIT/7FFDD82ABE70: Started 5 sec timeout
Nov  9 16:42:14.651 UTC: TPLUS(000024A5)/0/NB_WAIT: socket event 2
Nov  9 16:42:14.651 UTC: T+: Version 192 (0xC0), type 2, seq 1, encryption 1, SC 0
Nov  9 16:42:14.651 UTC: T+: session_id 3857814838 (0xE5F19536), dlen 49 (0x31)
Nov  9 16:42:14.651 UTC: T+: AUTHOR, priv_lvl:15, authen:1 method:tacacs+
Nov  9 16:42:14.651 UTC: T+: svc:1 user_len:4 port_len:4 rem_addr_len:14 arg_cnt:2
Nov  9 16:42:14.651 UTC: T+: user:  USERNAME
Nov  9 16:42:14.651 UTC: T+: port:  tty3
Nov  9 16:42:14.651 UTC: T+: rem_addr:  172.16.226.108
Nov  9 16:42:14.651 UTC: T+: arg[0]: size:13 service=shell
Nov  9 16:42:14.651 UTC: T+: arg[1]: size:4 cmd*
Nov  9 16:42:14.651 UTC: T+: End Packet
Nov  9 16:42:14.651 UTC: TPLUS(000024A5)/0/NB_WAIT: wrote entire 61 bytes request
Nov  9 16:42:14.651 UTC: TPLUS(000024A5)/0/READ: socket event 1
Nov  9 16:42:14.651 UTC: TPLUS(000024A5)/0/READ: Would block while reading
Nov  9 16:42:14.719 UTC: TPLUS(000024A5)/0/READ: socket event 1
Nov  9 16:42:14.719 UTC: TPLUS(000024A5)/0/READ: read entire 12 header bytes (expect 18 bytes data)
Nov  9 16:42:14.719 UTC: TPLUS(000024A5)/0/READ: socket event 1
Nov  9 16:42:14.719 UTC: TPLUS(000024A5)/0/READ: read entire 30 bytes response
Nov  9 16:42:14.719 UTC: T+: Version 192 (0xC0), type 2, seq 2, encryption 1, SC 0
Nov  9 16:42:14.719 UTC: T+: session_id 3857814838 (0xE5F19536), dlen 18 (0x12)
Nov  9 16:42:14.719 UTC: T+: AUTHOR/REPLY status:1 msg_len:0, data_len:0 arg_cnt:1
Nov  9 16:42:14.719 UTC: T+: msg:
Nov  9 16:42:14.719 UTC: T+: data:
Nov  9 16:42:14.719 UTC: T+: arg[0] size:11
Nov  9 16:42:14.719 UTC: T+:  priv-lvl=15
Nov  9 16:42:14.719 UTC: T+: End Packet
Nov  9 16:42:14.719 UTC: TPLUS(000024A5) login timer stopped
Nov  9 16:42:14.719 UTC: TPLUS(000024A5)/0/7FFDD82ABE70: Processing the reply packet
Nov  9 16:42:14.719 UTC: TPLUS: Processed AV priv-lvl=15
Nov  9 16:42:14.719 UTC: TPLUS: received authorization response for 9381: PASS
Nov  9 16:42:14.719 UTC: TPLUS: Invalid Client information received as input