[SLUG] Login session with no process

[Phil Scarratt]

I've been playing around with tunnelling of ports via ssh with no 
terminal being assigned. I now have the situation where who -u lists an 
entry for an ssh session which shouldn't exist, or rather for which 
there is no process present.

who -u gives:
root     pts/0        Jul 24 11:19   .         12195
root     pts/1        Jul 20 15:14   ?         21382
root     pts/2        Jul 20 15:30   ?         21694
pts/0 is my current session on the machine. pts/1 is a session that 
should no longer exist, originating from my machine (the same as pts/0) 
and for which there is no ssh process on my machine either. pts/2 is 
similar to pts/1 but should actually be a valid port tunnelling session 
from a different machine. PIDs 21382/21694 do not exist in the ps list.

I've tried googling but can't find anything, or more likely am not 
entering the correct phrase. man who doesn't shed much light. Is it 
possible that the utmp is "our of date" or something like that? It is 
likely that I killed the original process from my local machine for 
pts/1 on the server.

Oh, the RHL9 is the OS on the server, and 0 is the only file present in 
/etc/pts

Any help/links/explanations greatly appreciated.
Fil
--
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html