I've got a tool running that periodically SSHs into a variety of Linux hosts for some automated checking of services. In the process of doing so it does, in order:
- log in via SSH
- generate a tmp file in /tmp
- execute that
- report on it's results
- delete the file
- close SSH
It's always coming from one specific host name. I've never looked into this before. What's the best way to approach this? I'm sort of surprised I've never seen it in all these years.
[link][6 comments]