Hi Ursula,
first thanks for answering.
the message on the switch is:
003503: Apr 9 22:20:28.556 CET: AAA/MEMORY: create_user (0x3525020) user='NULL' ruser='NULL' ds0=0 port='tty2' rem_addr='1.2.3.4' authen_type=ASCII service=LOGIN priv=1 initial_task_id='0', vrf= (id=0)
003540: Apr 9 22:20:28.565 CET: SCP: [22 <- 1.2.3.4:42301] recv
003543: Apr 9 22:20:28.573 CET: SCP: [22 -> 1.2.3.4:42301] send Privilege denied.
003544: Apr 9 22:20:28.573 CET: AAA/MEMORY: free_user (0x3525020) user='cisco' ruser='NULL' port='tty2' rem_addr='1.2.3.4' authen_type=ASCII service=LOGIN priv=1
message on the server ( linux shell ) is "Privilege denied.":
tcpdump ( cut some lines because of the message lenght limit )
22:35:53.512912 server42306 > switch.ssh: S 3699893331:3699893331(0) win 5840 (DF)
22:35:53.515316 switch.ssh > server42306: S 1125892706:1125892706(0) ack 3699893332 win 4128 22:35:53.908506 switch.ssh > server42306: P 300:748(448) ack 713 win 3976 [tos 0xc0]
22:35:53.909241 switch.ssh > server42306: P 748:764(16) ack 713 win 3976 [tos 0xc0]
22:35:53.916613 server42306 > switch.ssh: P 713:729(16) ack 764 win 7504 (DF)
22:35:54.112267 switch.ssh > server42306: . ack 729 win 3960 [tos 0xc0]
22:35:54.112331 server42306 > switch.ssh: P 729:777(48) ack 764 win 7504 (DF)
22:35:54.114768 switch.ssh > server42306: P 764:812(48) ack 777 win 3912 [tos 0xc0]
22:35:54.115016 server42306 > switch.ssh: P 777:841(64) ack 812 win 7504 (DF)
22:35:54.118191 switch.ssh > server42306: P 812:860(48) ack 841 win 3848 [tos 0xc0]
22:35:54.158142 server42306 > switch.ssh: . ack 860 win 7504 (DF)
22:35:55.709807 server42306 > switch.ssh: P 841:985(144) ack 860 win 7504 (DF)
22:35:55.714610 switch.ssh > server42306: P 860:892(32) ack 985 win 3704 [tos 0xc0]
22:35:55.714637 server42306 > switch.ssh: . ack 892 win 7504 (DF)
22:35:55.714924 server42306 > switch.ssh: P 985:1049(64) ack 892 win 7504 (DF)
22:35:55.717394 switch.ssh > server42306: P 892:940(48) ack 1049 win 3640 [tos 0xc0]
22:35:55.717567 server42306 > switch.ssh: P 1049:1113(64) ack 940 win 7504 (DF) [tos 0x8]
22:35:55.718760 switch.ssh > server42306: . ack 1113 win 4128 [tos 0xc0]
22:35:55.718778 server42306 > switch.ssh: P 1113:1161(48) ack 940 win 7504 (DF) [tos 0x8]
22:35:55.723943 switch.ssh > server42306: P 940:1004(64) ack 1161 win 4080 [tos 0xc0]
22:35:55.763910 server42306 > switch.ssh: . ack 1004 win 7504 (DF) [tos 0x8]
22:35:55.823642 switch.ssh > server42306: P 1004:1068(64) ack 1161 win 4080 [tos 0xc0]
22:35:55.823674 server42306 > switch.ssh: . ack 1068 win 7504 (DF) [tos 0x8]
22:35:55.824214 switch.ssh > server42306: P 1068:1100(32) ack 1161 win 4080 [tos 0xc0]
22:35:55.824229 server42306 > switch.ssh: . ack 1100 win 7504 (DF) [tos 0x8]
22:35:55.824808 switch.ssh > server42306: P 1100:1132(32) ack 1161 win 4080 [tos 0xc0]
22:35:55.824855 server42306 > switch.ssh: . ack 1132 win 7504 (DF) [tos 0x8]
22:35:55.825017 server42306 > switch.ssh: P 1161:1193(32) ack 1132 win 7504 (DF) [tos 0x8]
22:35:55.825096 server42306 > switch.ssh: F 1193:1193(0) ack 1132 win 7504 (DF) [tos 0x8]
22:35:55.825459 switch.ssh > server42306: FP 1132:1132(0) ack 1161 win 4080 [tos 0xc0]
22:35:55.825489 server42306 > switch.ssh: . ack 1133 win 7504 (DF) [tos 0x8]
22:35:55.827153 switch.ssh > server42306: R 1125893838:1125893838(0) win 4080 [tos 0xc0]
22:35:55.827489 switch.ssh > server42306: R 1125893838:1125893838(0) win 0
22:35:55.827736 switch.ssh > server42306: R 1125893839:1125893839(0) win 0
i wish me some help and you much fun with the output.
regards Reinhold
