On Thu, 25 Nov 2021 04:23:23 +0100
"sp...@caiway.net" <sp...@caiway.net> wrote:
> Hello,
>
> My /var/tmp directory gets flooded by big files named:
>
> sort01ei1t
> sort01Eq7u
> sort01sLAs
> ...
> sortzZZtvv
>
>
> the files are approx. 13 Gb each.
> In 24 hours > 6000 are written.
>
they are approx. 13 Mb each, correction
# lsof /var/tmp/sort*
lsof: WARNING: can't stat() fuse.gvfsd-fuse file system
/run/user/1000/gvfs Output information may be incomplete.
lsof: WARNING: can't stat() fuse.portal file system /run/user/1000/doc
Output information may be incomplete.
the files are owned by root
> My big partition is filled by it until the system freezes.
>
> The files are plain text files, containing sshfs paths:
>
> /mnt/nas/sshfs/proc/self/task/413551/root/proc/self/task/413551/root/proc/self/task/413551/root/proc/self/task/413551/root/proc/
> .........
>
> nas and desktop are running debian 11 daily updated.
>
> How can I find out which program is writing these files?
>
> Thanks!
>
>
