Take a look:
# pstree
init---atd
+-bash
+-cron---firebird
¦ +-sendmail
+-cron---cron---sendmail
¦ +-sh---curl
+-dhclient
+-events/0---aio/0
¦ +-ata/0
¦ +-kacpid
¦ +-kblockd/0
¦ +-khelper
¦ +-2*[pdflush]
+-exim4
+-fbguard---fbserver
+-5*[getty]
+-inetd
+-khubd
+-7*[kjournald]
+-klogd
+-kseriod
+-ksoftirqd/0
+-kswapd0
+-lpd
+-named
+-nmbd
+-ntpd
+-portmap
+-rpc.statd
+-scsi_eh_0
+-scsi_eh_1
+-smbd---smbd
+-squid---squid---unlinkd
+-sshd---sshd---sshd---bash---bash---pstree
+-syslogd
# ps aux | grep cron
root 14094 0.0 0.1 1764 820 ? Ss 00:21 0:00 /usr/sbin/cron
root 14256 0.0 0.1 1848 708 pts/0 R+ 01:42 0:00 grep cron
r# ps aux | grep CRON
root 12156 0.0 0.1 2056 936 ? S May05 0:00 /USR/SBIN/CRON
root 14098 0.0 0.1 2056 940 ? S 00:28 0:00 /USR/SBIN/CRON
Why is there two processes with "cron"?