Whowatch is a interactive, ncurses-based, process and users monitoring tool which updates information in real time. It can be described as a some kind of interactive mix of ps, pstree, lsof, w, finger and kill. You can watch information about users currently logged on to the machine: login type - ie. "ssh" "telnet", tty, host, idle time and command line of their current process. You can also naviagate in processes tree, watch process details (memory, uid, open descriptors with TCP sockets mapped on IP:port -> IP:port pair etc.). Whowatch has support for plugins.