Hello again, I forgot to mention that I have MANY defuncts after one day:
ps -ef | grep sshd root 696 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 698 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 700 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 748 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 750 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 752 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 754 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 1648 11633 0 05:44 ? 00:00:00 [sshd] <defunct> root 4106 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 4108 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 4156 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 4158 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 4278 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 4280 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 4282 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 4284 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 7265 1 0 Jul26 ? 00:00:00 [sshd] <defunct> ajurak 7392 1 0 Jul26 ? 00:00:02 [sshd] <defunct> root 7638 1 0 Jul26 ? 00:00:00 [sshd] <defunct> ajurak 7686 1 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11102 11633 0 07:01 ? 00:00:00 [sshd] <defunct> sshd 11103 1 0 07:01 ? 00:00:00 [sshd] <defunct> root 11104 11633 0 07:01 ? 00:00:00 [sshd] <defunct> sshd 11105 1 0 07:01 ? 00:00:00 [sshd] <defunct> root 11165 11633 0 07:01 ? 00:00:00 [sshd] <defunct> sshd 11166 1 0 07:01 ? 00:00:00 [sshd] <defunct> root 11229 11633 0 07:02 ? 00:00:00 [sshd] <defunct> sshd 11230 1 0 07:02 ? 00:00:00 [sshd] <defunct> root 11231 11633 0 07:02 ? 00:00:00 [sshd] <defunct> sshd 11232 1 0 07:02 ? 00:00:00 [sshd] <defunct> root 11355 11633 0 07:03 ? 00:00:00 [sshd] <defunct> sshd 11356 1 0 07:03 ? 00:00:00 [sshd] <defunct> root 11357 11633 0 07:03 ? 00:00:00 [sshd] <defunct> sshd 11358 1 0 07:03 ? 00:00:00 [sshd] <defunct> root 11597 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11599 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11633 1 0 Jul26 ? 00:00:00 /usr/sbin/sshd -D root 11653 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11663 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11724 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11726 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11728 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11822 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11824 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11828 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11830 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11951 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11952 11633 0 07:08 ? 00:00:00 [sshd] <defunct> sshd 11953 1 0 07:08 ? 00:00:00 [sshd] <defunct> root 11954 11633 0 07:08 ? 00:00:00 [sshd] <defunct> sshd 11955 1 0 07:08 ? 00:00:00 [sshd] <defunct> root 11983 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 11985 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12004 11633 0 07:08 ? 00:00:00 [sshd] <defunct> sshd 12005 1 0 07:08 ? 00:00:00 [sshd] <defunct> root 12033 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12081 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12083 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12085 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12100 11633 0 07:09 ? 00:00:00 [sshd] <defunct> sshd 12101 1 0 07:09 ? 00:00:00 [sshd] <defunct> root 12102 11633 0 07:09 ? 00:00:00 [sshd] <defunct> sshd 12103 1 0 07:09 ? 00:00:00 [sshd] <defunct> root 12104 11633 0 07:09 ? 00:00:00 [sshd] <defunct> sshd 12105 1 0 07:09 ? 00:00:00 [sshd] <defunct> root 12106 11633 0 07:09 ? 00:00:00 [sshd] <defunct> sshd 12107 1 0 07:09 ? 00:00:00 [sshd] <defunct> root 12108 11633 0 07:09 ? 00:00:00 [sshd] <defunct> sshd 12109 1 0 07:09 ? 00:00:00 [sshd] <defunct> root 12110 11633 0 07:09 ? 00:00:00 [sshd] <defunct> sshd 12111 1 0 07:09 ? 00:00:00 [sshd] <defunct> root 12112 11633 0 07:09 ? 00:00:00 [sshd] <defunct> sshd 12113 1 0 07:09 ? 00:00:00 [sshd] <defunct> root 12114 11633 0 07:09 ? 00:00:00 [sshd] <defunct> sshd 12115 1 0 07:09 ? 00:00:00 [sshd] <defunct> root 12125 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12148 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12196 11633 0 07:10 ? 00:00:00 [sshd] <defunct> sshd 12197 1 0 07:10 ? 00:00:00 [sshd] <defunct> root 12228 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12258 11633 0 07:10 ? 00:00:00 [sshd] <defunct> root 12259 11633 0 07:10 ? 00:00:00 [sshd] <defunct> sshd 12260 1 0 07:10 ? 00:00:00 [sshd] <defunct> sshd 12261 1 0 07:10 ? 00:00:00 [sshd] <defunct> root 12262 11633 0 07:10 ? 00:00:00 [sshd] <defunct> sshd 12263 1 0 07:10 ? 00:00:00 [sshd] <defunct> root 12264 11633 0 07:10 ? 00:00:00 [sshd] <defunct> sshd 12265 1 0 07:10 ? 00:00:00 [sshd] <defunct> root 12266 11633 0 07:10 ? 00:00:00 [sshd] <defunct> root 12267 11633 0 07:10 ? 00:00:00 [sshd] <defunct> sshd 12268 1 0 07:10 ? 00:00:00 [sshd] <defunct> root 12269 11633 0 07:10 ? 00:00:00 [sshd] <defunct> sshd 12270 1 0 07:10 ? 00:00:00 [sshd] <defunct> sshd 12271 1 0 07:10 ? 00:00:00 [sshd] <defunct> root 12322 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12354 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12474 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12478 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12526 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12574 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12694 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12726 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12821 11633 0 02:54 ? 00:00:00 [sshd] <defunct> root 12828 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12889 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12902 11633 0 02:55 ? 00:00:00 [sshd] <defunct> root 12951 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 12999 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13081 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13083 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13203 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13205 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13207 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13209 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13303 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13305 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13366 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13368 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13429 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13431 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13490 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13492 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13494 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13496 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13544 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13546 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13548 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13550 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13598 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13600 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13602 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13604 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13606 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13608 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13610 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13612 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13614 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13616 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13618 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13679 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13740 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13742 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13744 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13746 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13748 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13750 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13752 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13800 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13802 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13804 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13852 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13854 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13856 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13888 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13890 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13892 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13894 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13895 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13957 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 13959 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14020 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14021 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14024 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14026 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14028 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14030 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14032 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14034 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14036 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14084 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14132 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14142 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14144 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14205 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14267 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14299 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14301 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 14349 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 18699 11633 0 03:39 ? 00:00:00 [sshd] <defunct> root 18863 11633 0 03:39 ? 00:00:00 [sshd] <defunct> root 18865 11633 0 03:39 ? 00:00:00 [sshd] <defunct> root 18926 11633 0 03:39 ? 00:00:00 [sshd] <defunct> root 18928 11633 0 03:39 ? 00:00:00 [sshd] <defunct> root 18930 11633 0 03:39 ? 00:00:00 [sshd] <defunct> root 18932 11633 0 03:39 ? 00:00:00 [sshd] <defunct> root 18934 11633 0 03:39 ? 00:00:00 [sshd] <defunct> root 18936 11633 0 03:39 ? 00:00:00 [sshd] <defunct> root 18938 11633 0 03:39 ? 00:00:00 [sshd] <defunct> root 18940 11633 0 03:39 ? 00:00:00 [sshd] <defunct> root 18969 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 18971 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 18973 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19021 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19023 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19025 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19027 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19075 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19077 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19079 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19081 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19083 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19085 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19087 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19089 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19091 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19093 11633 0 03:40 ? 00:00:00 [sshd] <defunct> root 19095 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19096 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19099 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19101 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19103 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19105 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19107 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19109 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19157 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19172 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19174 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19218 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19220 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19239 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19241 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19243 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19245 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19247 11633 0 03:41 ? 00:00:00 [sshd] <defunct> root 19260 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19262 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19264 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19282 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19284 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19286 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19288 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19290 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19292 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19294 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19312 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19314 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19316 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19318 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19350 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19352 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19353 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19355 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19357 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19358 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19366 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19367 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19370 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19372 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19374 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19376 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19378 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19380 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19424 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19426 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19428 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19430 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19432 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19434 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19436 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19438 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19440 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19441 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19443 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19445 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19447 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19450 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19452 11633 0 03:42 ? 00:00:00 [sshd] <defunct> root 19454 11633 0 03:43 ? 00:00:00 [sshd] <defunct> root 19456 11633 0 03:43 ? 00:00:00 [sshd] <defunct> root 19508 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19510 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19512 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19514 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19523 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19525 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19526 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19529 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19577 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19579 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19603 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 19629 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 20057 11633 0 03:46 ? 00:00:00 [sshd] <defunct> root 20059 11633 0 03:46 ? 00:00:00 [sshd] <defunct> root 20061 11633 0 03:46 ? 00:00:00 [sshd] <defunct> root 20063 11633 0 03:46 ? 00:00:00 [sshd] <defunct> root 20065 11633 0 03:47 ? 00:00:00 [sshd] <defunct> root 20067 11633 0 03:47 ? 00:00:00 [sshd] <defunct> root 20128 11633 0 03:47 ? 00:00:00 [sshd] <defunct> root 20130 11633 0 03:47 ? 00:00:00 [sshd] <defunct> root 20131 11633 0 03:47 ? 00:00:00 [sshd] <defunct> root 21504 11633 0 03:58 ? 00:00:00 [sshd] <defunct> root 21700 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 21718 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 21817 11633 0 04:01 ? 00:00:00 [sshd] <defunct> root 21878 11633 0 04:01 ? 00:00:00 [sshd] <defunct> root 21939 11633 0 04:01 ? 00:00:00 [sshd] <defunct> root 21941 11633 0 04:01 ? 00:00:00 [sshd] <defunct> root 21943 11633 0 04:01 ? 00:00:00 [sshd] <defunct> root 21949 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 21951 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 21953 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 21955 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 21957 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 22005 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 22053 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 22055 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 22057 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 22059 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 22061 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 22063 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 22064 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 22066 11633 0 04:02 ? 00:00:00 [sshd] <defunct> root 22617 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 22737 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 22739 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 22741 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 22789 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 22840 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 22842 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 22844 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 23925 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 23927 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 23929 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 23977 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> root 24773 11633 0 Jul26 ? 00:00:00 [sshd] <defunct> .... removed my logins (4 lines) .... root 26928 11633 0 04:43 ? 00:00:00 [sshd] <defunct> the sshd config is the default ubuntu config file. I just added these lines: Banner /etc/ssh/sshd_banner.txt PermitRootLogin no MaxAuthTries 5 LoginGraceTime 1m UsePAM yes applied all updates yesterday. what's going in here??? thanx axel ** Information type changed from Public to Private Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/1329939 Title: Service ssh stop/start/restart hangs Status in “openssh” package in Ubuntu: Confirmed Bug description: When using "service ssh," all of the actions cause the service process to hang, with varying results on the sshd process. root@localdev14:~# ps -ef | grep ssh root 28264 1 0 15:39 ? 00:00:00 /usr/sbin/sshd -D root 28353 28264 0 15:46 ? 00:00:00 sshd: user [priv] user 28402 28353 0 15:46 ? 00:00:00 sshd: user@pts/0 root 28433 28418 0 15:47 pts/0 00:00:00 grep --color=auto ssh root@localdev14:~# service ssh stop (after a couple of minutes) ^C root@localdev14:~# ps -ef | grep ssh root 28264 1 0 15:39 ? 00:00:00 /usr/sbin/sshd -D root 28353 28264 0 15:46 ? 00:00:00 sshd: user [priv] user 28402 28353 0 15:46 ? 00:00:00 sshd: user@pts/0 root 28444 28418 0 15:48 pts/0 00:00:00 grep --color=auto ssh A trace on /usr/sbin/service shows that it's hanging at /sbin/stop; root@localdev14:~# bash -x /usr/sbin/service ssh stop 2>&1 | tee /tmp/ssh.restart ++ basename /usr/sbin/service + VERSION='service ver. 0.91-ubuntu1' ++ basename /usr/sbin/service + USAGE='Usage: service < option > | --status-all | [ service_name [ command | --full-restart ] ]' + SERVICE= + ACTION= + SERVICEDIR=/etc/init.d + OPTIONS= + '[' 2 -eq 0 ']' + cd / + '[' 2 -gt 0 ']' + case "${1}" in + '[' -z '' -a 2 -eq 1 -a ssh = --status-all ']' + '[' 2 -eq 2 -a stop = --full-restart ']' + '[' -z '' ']' + SERVICE=ssh + shift + '[' 1 -gt 0 ']' + case "${1}" in + '[' -z ssh -a 1 -eq 1 -a stop = --status-all ']' + '[' 1 -eq 2 -a '' = --full-restart ']' + '[' -z ssh ']' + '[' -z '' ']' + ACTION=stop + shift + '[' 0 -gt 0 ']' + '[' -r /etc/init/ssh.conf ']' + which initctl + initctl version + grep -q upstart + case "${ACTION}" in + exec stop ssh ^C root@localdev14:~# ps -ef | grep sshd root 28264 1 0 15:39 ? 00:00:00 /usr/sbin/sshd -D root 28353 28264 0 15:46 ? 00:00:00 sshd: user [priv] user 28402 28353 0 15:46 ? 00:00:00 sshd: user@pts/0 root 28478 28418 0 15:54 pts/0 00:00:00 grep --color=auto sshd Restarting the service gets a different error; root@localdev14:~# bash -x /usr/sbin/service ssh restart 2>&1 | tee /tmp/ssh.restart ++ basename /usr/sbin/service + VERSION='service ver. 0.91-ubuntu1' ++ basename /usr/sbin/service + USAGE='Usage: service < option > | --status-all | [ service_name [ command | --full-restart ] ]' + SERVICE= + ACTION= + SERVICEDIR=/etc/init.d + OPTIONS= + '[' 2 -eq 0 ']' + cd / + '[' 2 -gt 0 ']' + case "${1}" in + '[' -z '' -a 2 -eq 1 -a ssh = --status-all ']' + '[' 2 -eq 2 -a restart = --full-restart ']' + '[' -z '' ']' + SERVICE=ssh + shift + '[' 1 -gt 0 ']' + case "${1}" in + '[' -z ssh -a 1 -eq 1 -a restart = --status-all ']' + '[' 1 -eq 2 -a '' = --full-restart ']' + '[' -z ssh ']' + '[' -z '' ']' + ACTION=restart + shift + '[' 0 -gt 0 ']' + '[' -r /etc/init/ssh.conf ']' + which initctl + initctl version + grep -q upstart + case "${ACTION}" in + stop ssh stop: Job has already been stopped: ssh + : + exec start ssh ^C root@localdev14:~# ps -ef | grep sshd root 28264 1 0 15:39 ? 00:00:00 /usr/sbin/sshd -D root 28353 28264 0 15:46 ? 00:00:00 sshd: user [priv] user 28402 28353 0 15:46 ? 00:00:00 sshd: user@pts/0 root 28495 28418 0 15:56 pts/0 00:00:00 grep --color=auto sshd As you can see from the PID, the sshd service was in fact not stopped. If you kill the sshd manually, and try to use the service command to start the process, that hangs as well, although the process is actually started; root@localdev14:~# bash -x /usr/sbin/service ssh start 2>&1 | tee /tmp/ssh.start ++ basename /usr/sbin/service + VERSION='service ver. 0.91-ubuntu1' ++ basename /usr/sbin/service + USAGE='Usage: service < option > | --status-all | [ service_name [ command | --full-restart ] ]' + SERVICE= + ACTION= + SERVICEDIR=/etc/init.d + OPTIONS= + '[' 2 -eq 0 ']' + cd / + '[' 2 -gt 0 ']' + case "${1}" in + '[' -z '' -a 2 -eq 1 -a ssh = --status-all ']' + '[' 2 -eq 2 -a start = --full-restart ']' + '[' -z '' ']' + SERVICE=ssh + shift + '[' 1 -gt 0 ']' + case "${1}" in + '[' -z ssh -a 1 -eq 1 -a start = --status-all ']' + '[' 1 -eq 2 -a '' = --full-restart ']' + '[' -z ssh ']' + '[' -z '' ']' + ACTION=start + shift + '[' 0 -gt 0 ']' + '[' -r /etc/init/ssh.conf ']' + which initctl + initctl version + grep -q upstart + case "${ACTION}" in + exec start ssh ^C root@localdev14:~# ps -ef | grep sshd root 28353 1 0 15:46 ? 00:00:00 sshd: user [priv] user 28402 28353 0 15:46 ? 00:00:00 sshd: user@pts/0 root 28510 1 0 15:58 ? 00:00:00 /usr/sbin/sshd -D root 28515 28418 0 15:59 pts/0 00:00:00 grep --color=auto sshd I've been able to reproduce this problem both after a reboot, and from the console, with no user sshd process running. On a side note, the sshd_config file appears to be sane. At least no errors are being presented, so I don't believe this is OpenSSH related. root@localdev14:~# sshd -T port 22 protocol 2 addressfamily any listenaddress 0.0.0.0:22 listenaddress [::]:22 usepam 1 serverkeybits 1024 logingracetime 120 keyregenerationinterval 3600 x11displayoffset 10 maxauthtries 6 maxsessions 10 clientaliveinterval 0 clientalivecountmax 3 permitrootlogin no ignorerhosts yes ignoreuserknownhosts no rhostsrsaauthentication no hostbasedauthentication no hostbasedusesnamefrompacketonly no rsaauthentication yes pubkeyauthentication yes passwordauthentication yes kbdinteractiveauthentication yes challengeresponseauthentication no printmotd no printlastlog yes x11forwarding yes x11uselocalhost yes strictmodes yes tcpkeepalive yes permitemptypasswords no permituserenvironment no uselogin no compression delayed gatewayports no usedns yes allowtcpforwarding yes useprivilegeseparation yes pidfile /var/run/sshd.pid xauthlocation /usr/bin/xauth authorizedkeysfile %h/.ssh/authorized_keys authorizedkeysfile2 %h/.ssh/authorized_keys loglevel INFO syslogfacility AUTH hostkey /etc/ssh/ssh_host_rsa_key hostkey /etc/ssh/ssh_host_dsa_key hostkey /etc/ssh/ssh_host_ecdsa_key acceptenv LANG acceptenv LC_* subsystem sftp /usr/lib/openssh/sftp-server maxstartups 10:100:10 permittunnel no ipqos 0x10 0x08 permitopen any root@localdev14:~# System Specs: root@localdev14:~# lsb_release -rd Description: Ubuntu 14.04 LTS Release: 14.04 root@localdev14:~# apt-cache policy upstart upstart: Installed: 1.12.1-0ubuntu4 Candidate: 1.12.1-0ubuntu4 Version table: *** 1.12.1-0ubuntu4 0 500 http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages 100 /var/lib/dpkg/status To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1329939/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp