Function is_ssh_tunnel_cmdline 

pub fn is_ssh_tunnel_cmdline(cmdline: &ProcessCmdline) -> bool

Returns true if this cmdline looks like an SSH port-forwarding tunnel.

Matches when the executable contains "ssh" and the arguments include -L, -R, or -D.