Maja wrote:
> Greetings,
>
> /tmp is showing it is much more full than the files that are in there.
> I'm assuming someone (or some app) deleted an open file. Other than
> poking
> around in history files, is there a way to find these phantom file
> names?
> I ran an fsck -c /tmp and checked the running processes but did not see
> anything that was directing output to a file in /tmp.
>
> Thanks.

man fuser

for longer term, google lsof
you may want to add this to your system