i don't recognise those file names myself, but maybe someone else does... what i would suggest though is that you have a look at the lsof tool. if you install it and just do say, "watch lsof /tmp/_IP*" you'll see all the processes which currently have open files in /tmp. also using it via the watch command means that it'll keep running it every 2 seconds so you can see what's changing. it's not watertight in the slightest, but if whatever it is is actually keeping the files open long enough for lsof to catch them in the act, you'll find out straight away. I'm not too hot on lsof, so there's proabbly an even better way to use it for what you want.. it's clever stuff
|