Kristian just stopped by my cubcicle to talk about the strange behaviour of our department server. It's main use is as a CVS server (via SSH). We have lots of defunct CVS processes. Weird and no hint in the logs as to what is going on.
Seems they are all children of an SSHd process ... most of them are owned by Kristian. Most of the rest are owned by someone using CVS from a Linux box. Weird.