S root     18508     1  0  80   0  3048 15342 poll_s 02:19 ?        00:00:00 /usr/sbin/sshd -D
S root     18540 18508  0  80   0  4336 30060 poll_s 02:20 ?        00:00:00 sshd: joan [priv]   
S joan     18578 18540  0  80   0  2020 30094 poll_s 02:20 ?        00:00:00 sshd: joan@pts/2    
S joan     18667 18579  0  80   0   900  3304 pipe_w 02:31 pts/2    00:00:00 grep sshd