rlogin under ptree (vsh is high)

Hi,

Recently did a ptree on a vsh PID and found that the only child process underneath the vsh parent is rlogin (telnet session(s)). Is there any way to drill down further from here? What causes rlogin to make vsh go high or is it rlogin? The cpu utilization at times is at 48-49%. We want to find the specific process that`s doing this or would this be drive space, system memory?

We know it's not a cron job...that would have a PID...so it's confusing.

Kind regards,

Troy.