Below is a screenshot of top:
ps -fax has these in:
CODE
4877 ? S 0:03 /usr/sbin/sshd
19279 ? S 0:00 _ sshd: ollie [priv]
19281 ? S 0:00 | _ sshd: ollie@pts/0
19282 pts/0 S 0:00 | _ -bash
27771 pts/0 R 0:00 | _ ps fax
27765 ? S 0:00 _ sshd: unknown [priv]
27766 ? S 0:00 | _ sshd: unknown [net]
27767 ? S 0:00 _ sshd: unknown [priv]
27768 ? S 0:00 | _ sshd: unknown [net]
27769 ? S 0:00 _ sshd: unknown [priv]
27770 ? S 0:00 _ sshd: unknown [net]
19279 ? S 0:00 _ sshd: ollie [priv]
19281 ? S 0:00 | _ sshd: ollie@pts/0
19282 pts/0 S 0:00 | _ -bash
27771 pts/0 R 0:00 | _ ps fax
27765 ? S 0:00 _ sshd: unknown [priv]
27766 ? S 0:00 | _ sshd: unknown [net]
27767 ? S 0:00 _ sshd: unknown [priv]
27768 ? S 0:00 | _ sshd: unknown [net]
27769 ? S 0:00 _ sshd: unknown [priv]
27770 ? S 0:00 _ sshd: unknown [net]
The DNSONLY server has SSH processes too, are these from cPanel sychronising the named?
