sshd x 3
 

Hi, just curious...
A 'top' shows me this:

27297 www 9 0 1792 1740 1536 R 0.0 1.9 0:00.18 sshd
27295 root 9 0 1660 1604 1436 S 0.0 1.7 0:00.00 sshd
27293 root 9 0 1660 1604 1436 S 0.0 1.7 0:00.00 sshd

One is my current session (www) and one is just listening for incoming connections. But what does the third process do?

-Martin

We can't know, may be you have a ssh poltergeist.

Sorry, just kidding. Use who, w, and 'lsof -i -n | grep ssh' to see the conections.