Aug 28 20:34:42 vader sshd[14806]: error: Strange, wait returned pid 1075805752, expected 14884 Aug 28 20:34:42 vader sshd[14806]: Disconnecting: Command terminated on signal 4. OS is OpenBSD 2.9, i386. That error was generated when a user logged out. This is the first time I've seen this, but I notice I'm not the only one: http://www.monkey.org/openbsd/archive/misc/0106/msg00918.html Fwiw here are the syslog entries from when that user logged in: Aug 28 12:20:53 vader sshd[14806]: Accepted password for (user) from 171.78.112.20 port 1064 Aug 28 12:20:53 vader sshd[14806]: packet_set_maxsize: setting to 4096 Here is the accounting dump from the same time frame, dunno if it helps: procmail - (user) __ 0.08 secs Tue Aug 28 20:35 (0:00:00.50) bash -S (user) ttyp1 0.25 secs Tue Aug 28 12:20 (8:14:44.00) bash -F (user) ttyp1 0.02 secs Tue Aug 28 20:34 (0:00:00.09) tty - (user) ttyp1 0.02 secs Tue Aug 28 20:34 (0:00:00.05) (I wish process accounting recorded process IDs... sigh.) -- Jim B. vader at conflict.net