Linux wrote: > > # ps ax > PID TTY STAT TIME COMMAND > <snip> > 2994 ? Ss 0:00 sshd: root at pts/2 > <snip> > 4028 pts/2 Ss+ 0:00 -bash > <snip> > 5603 ? Ss 0:00 sshd: root at pts/0 > 5625 pts/0 Ss 0:00 -bash Two root logins via ssh - are these both you? The first looks early in the boot process. I'm sure I don't need to say you shouldn't really be logging in directly as root. Better to disable root logins by ssh - login as a regular user and su to root. http://wiki.centos.org/HowTos/Network/SecuringSSH