2/5     hmm.
$netstat -at | grep LISTEN
tcp        0      0 *:43300                 *:*                     LISTEN
        \_ this is an sshd
tcp        0      0 *:49416                 *:*                     LISTEN
tcp        0      0 *:36201                 *:*                     LISTEN
        \_ looks like an sshd
tcp        0      0 *:sunrpc                *:*                     LISTEN
tcp        0      0 *:www                   *:*                     LISTEN
tcp        0      0 *:auth                  *:*                     LISTEN
tcp        0      0 *:ssh                   *:*                     LISTEN
tcp        0      0 *:49944                 *:*                     LISTEN
tcp        0      0 *:42701                 *:*                     LISTEN
        \_ guess what this is
tcp        0      0 localhost:smtp          *:*                     LISTEN
tcp        0      0 *:2555                  *:*                     LISTEN
        \_ this is a sshd
tcp6       0      0 [::]:ssh                [::]:*                  LISTEN
tcp6       0      0 [::]:2555               [::]:*                  LISTEN
        We love our sshds?
        \_ why so many sshds? and why do they survive after a reboot?
           \_ Just 22 and 2555, which points to 22. The others are not actually
              sshds. So says steven. Nothing to see here. --toulouse
              \_ welp, as long as they're benign that's fine.