Here's a quickie script to watch a particular session:
tail -f $LOG | awk '/connection received: host='$1'/ { pid = $3 }$3 == pid { print }'
Is there something in the log file which will indicatea disconnect as well?
Many TIA,Mark