On Sat, Aug 1, 2015 at 6:53 PM, Quartz <[email protected]> wrote:
>> Exactly. Probably ps -l (or maybe install and use pstree). Do you get >> new processes with sshd as a parent? > > I never get that. When ssh-ing into another machine I just get a single ssh > process that's a direct child of the bash for that tty, there's never an > sshd anywhere. When you use ps -l you will only see processes with a controlling terminal. But the PPID column relates each process to its parent process. If you start at any arbitrary process and trace back to its parent, and then to that process's parent, you will eventually find a PPID for a process that did not show up in ps -l. That will probably be the process id of sshd. To verify this hypothesis, you can use ps -x. Or: ps -lx | grep 'ssh[d]' -- Raul
