[LBo] who is logged into my system

[Andrew Henry]

How can I find out who is logged into my system remotely and what they
are *currently* doing?

I have just finished chapter 4 and know of the who command ('who -a' and
'who -u') but I have a family member who logs in via SSH using WinSCP
and 'who -a' does not show them as logged in.  Why is this?  auth.log
registers that they have logged in.

How can I see what they are currently doing if it's just IO (file
uploading).  Does this show in ps in some way?  All I can see is that
they have an sshd & sftp-server process running.

Thanks,
--andrew

-- 
GnuPG Key ID: ECB18ABA
Fingerprint:  FDF3 91FC F5BC 1164 E217  315E 337E 219B ECB1 8ABA