On Fri, 10 Sep 2004, Christos Zoulas wrote:
> In article <20040910110956.GB28003@drowsy.duskware.de>,
> Martin Husemann <martin@duskware.de> wrote:
> >On Fri, Sep 10, 2004 at 02:40:45PM +0200, Frank B. Scholl wrote:
> >> the rights are set like one expects them to be set, always:
> >> 
> >> -rw-r--r--  1 root  wheel  54878535680 Sep  8 17:13 sd0
> >
> >This is a regular file (not suprising). After a MAKEDEV all it should
> >be a device, like:
> 
> Its contents might give you a hint about its creator. You can make it a symlink
> to /dev/null until you catch the culprit.

If you're feeling ambitious, make it a named pipe - then write a reader
program that will block, waiting for someone to write to the pipe. When
the reader wakes up, have it do an fstat to identify the process that
had opened the pipe for writing...

-- 
David Maxwell, david@vex.net|david@maxwell.net -->
If you don't spend energy getting what you want,
	You'll have to spend it dealing with what you get.
					      - Unknown