I would like to know which process has created files on os X 10.6. I'm trying DTrace, which probably will give the right answer, but I have not eyes to see the method. I'm doing this because I think some oddities are happening with the Flash plugin, and triggering spotlight.


Would lsof help? If the file is still open, you can see who has it open. Also very useful when you get "device or resource busy" errors.

  • No, lsof is not the way. See, I might come across a strange file, and wonder how it got there. DTrace is fine for the actual opening when it's open. But when I sit down and say "hmm where did this 'always_watchin_you.sol' file come from?", all i get is that it's my UID. – chiggsy Jul 17 '11 at 10:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.