try
truss w
Then
ps -ef |grep pts/xx
where pts/xx is the last one listed in the truss output before the hang, this should give you the problem login.
Mike
"Whenever I dwell for any length of time on my own shortcomings, they gradually begin to seem mild, harmless, rather engaging little things, not at all like the staring defects in other people's characters."