If it's useful to anyone, here is a small script to track the number of fd used per process. By default t takes a sample every 5 minutes. Then you can diff the logs to find which process is suspicious.
If it's useful to anyone, here is a small script to track the number of fd used per process. By default t takes a sample every 5 minutes. Then you can diff the logs to find which process is suspicious.